Description
用友 NC 是一款大型 erp 企业管理系统与电子商务平台。用友 NCCloud FS文件管理登录页面对用户名参数没有过滤，存在SQL注入。
用友NC /fs/console 接口存在SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://mrxn.net/jswz/yonyou-ncc-uap-pub-fs-console-FsConsoleService-confData-sqli.html
https://www.cnblogs.com/pursue-security/p/17685151.html
https://cn-sec.com/archives/1344923.html
https://github.com/j2ekim/YonyouNC_Tip
https://peiqi.wgpsec.org/wiki/oa/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8B%20NCCloud%20FS%E6%96%87%E4%BB%B6%E7%AE%A1%E7%90%86SQL%E6%B3%A8%E5%85%A5.html
https://www.saury.net/1271.html