Description
U8cloud系统ReportDetailDataQuery接口存在SQL注入漏洞,攻击者未经授权可以访问数据库中的数据，从而盗取用户数据，造成用户信息泄露。
用友 U8 Cloud ReportDetailDataQuery SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/luck-ying/Library-POC/blob/master/%E7%94%A8%E5%8F%8B/%E7%94%A8%E5%8F%8BU8C-ReportDetailDataQuery-SQL%E6%B3%A8%E5%85%A5.py
https://blog.csdn.net/qq_42067124/article/details/135274708
https://cn-sec.com/archives/2344042.html
https://download.csdn.net/blog/column/12593339/136447443