Description
NC及NC CLOUD系统可利用MaLoginAction接口的SQL注入漏洞，实现获取服务器敏感信息。
关于NC及NC Cloud系统MaLoginAction接口的SQL注入漏洞的安全通告
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.scribd.com/document/870380103/2025-Attack-Defense-Vulnerability-List
https://www.cnvd.org.cn/flaw/show/CNVD-2025-01110
https://mrxn.net/jswz/yonyou-ncc-uapws-service-IBapIOService-getBapTable-sqli.html
https://cloud.tencent.com/developer/article/2443510
https://avd.aliyun.com/detail?id=AVD-2024-1727131
https://www.cnblogs.com/0day-li/p/19007070