用友NC 存在远程命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E7%94%A8%E5%8F%8B-NC-bsh.servlet.BshServlet-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://zhuanlan.zhihu.com/p/645520783
• https://www.cnblogs.com/pursue-security/p/17685141.html
• https://blog.csdn.net/huangyongkang666/article/details/128612035
• https://www.secrss.com/articles/20015
• https://rivers.chaitin.cn/blog/cq94eap0lnechd24358g
• https://github.com/MzzdToT/Yongyou_NC_Cloud_upload_rce
• https://drea1v1.github.io/2020/06/17/%E7%94%A8%E5%8F%8Bnc%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/
• https://zbysec.com/?mod=news_detail&id=92
• https://cloud.tencent.com/developer/article/1843891
• https://zhuanlan.zhihu.com/p/647100945
• https://avd.aliyun.com/detail?id=AVD-2022-1158606
• https://www.ufida168.com/news/1430.html
• https://nic.hntou.edu.cn/wlaq/202106/t20210609_44207.html
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E7%94%A8%E5%8F%8B-NC-Cloud-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CNVD-C-2023-76801.md
• https://www.cnblogs.com/rab3it/p/14843978.html
• https://www.anquanke.com/post/id/207772
• https://nvd.nist.gov/vuln/detail/CVE-2025-34039
• https://github.com/z1un/NC-BeanShell-RCE

Related Vulnerabilities

• 用友NC /uapws/service/nc.itf.msgcenter.IMsgCenterWebService SQL 注入漏洞
• 用友NC /lfw/chart XML 外部实体注入漏洞
• 用友 NC /uapws/service/nc.itf.bap.oba.IObaExcelService XML 外部实体注入漏洞
• 用友 NC /uapws/service/nc.itf.bd.crm.ICustomerImportToNcService XML 外部实体注入漏洞
• 用友 NC /uapws/service/nc.itf.bd.crm.ICurrtypeExportToCrmService XML 外部实体注入漏洞
• 用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService XML 外部实体注入漏洞
• 用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService SQL 注入漏洞
• 用友 NC /uapws/service/nc.uap.oba.word.webservice.IServiceEntryPoint XML 外部实体注入漏洞
• 用友 NC /uapws/service/nc.itf.bap.oba.IObaWordService XML 外部实体注入漏洞
• 用友 NC /uapws/service/nc.itf.bd.crm.IPsndocExportToCrmService XML 外部实体注入漏洞
• 用友 NC /uapws/service/nc.uap.oba.wordWebservice.IServiceEntry XML 外部实体注入漏洞
• 用友NC Cloud /ncchr/pm/ref/indiIssued/blobRefClassSearch 代码执行漏洞
• 用友NC /portal/pt/M0dUlE/redeploy SQL 注入漏洞