Description
用友NC nc.uap.oba.wordWebservice.IServiceEntry XXE漏洞，攻击者可构造恶意请求使YonYou NC 请求恶意的XML文档，从而触发XXE，从而可造成敏感信息泄漏等。
用友NC IServiceEntry 接口存在XML实体注入
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://mrxn.net/jswz/yonyou-nc-IServiceEntryPoint-getResult-xxe.html
https://deded.de/archives/0b515c16-5153-43ff-9369-a113aa8349aa
https://www.cnblogs.com/pursue-security/p/17775864.html
https://blog.csdn.net/qq_36618918/article/details/135402449
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BNC_CLOUD_smartweb2.RPC.d_XML%E5%A4%96%E9%83%A8%E5%AE%9E%E4%BD%93%E6%B3%A8%E5%85%A5.md