References https://www.cnblogs.com/pa0fu/p/18269365 https://www.ddpoc.com/DVB-2023-5455.html https://github.com/Sec-Fork/POC-20250106/blob/main/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BNC-Cloud%E6%96%87%E4%BB%B6%E6%9C%8D%E5%8A%A1%E5%99%A8%E7%94%A8%E6%88%B7%E7%99%BB%E9%99%86%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E.md https://mrxn.net/jswz/yonyou-ncc-uap-pub-fs-console-FsConsoleService-confData-sqli.html https://blog.csdn.net/qq_34780861/article/details/137295608 https://www.cnblogs.com/pursue-security/p/17685126.html https://www.cnblogs.com/pursue-security/p/17685151.html https://github.com/Threekiii/Awesome-POC
Related Vulnerabilities用友NC /uapws/service/nc.itf.msgcenter.IMsgCenterWebService SQL 注入漏洞用友NC /lfw/chart XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bap.oba.IObaExcelService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICustomerImportToNcService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICurrtypeExportToCrmService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService SQL 注入漏洞用友 NC /uapws/service/nc.uap.oba.word.webservice.IServiceEntryPoint XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bap.oba.IObaWordService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.IPsndocExportToCrmService XML 外部实体注入漏洞用友 NC /uapws/service/nc.uap.oba.wordWebservice.IServiceEntry XML 外部实体注入漏洞用友NC Cloud /ncchr/pm/ref/indiIssued/blobRefClassSearch 代码执行漏洞用友NC /portal/pt/M0dUlE/redeploy SQL 注入漏洞