关于NC Cloud系统的mob接口tenantId参数sql注入漏洞的安全通告

2024-12-31 NC Cloud PoC No

Description

<span style="color: rgb(0, 0, 0);">NC Cloud系统的mob接口传入的参数tenantId存在SQL注入漏洞,可窃取服务器敏感信息。</span><br>

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities