关于NC及NC Cloud系统的TbbOutlineUpateVersionService接口sql注入漏洞的安全通告

2024-09-04 NC NC Cloud系统 PoC No

Description

<span style="color: rgb(0, 0, 0);">NC及NC Cloud系统的TbbOutlineUpateVersionService传入的参数string存在SQL注入漏洞,可窃取服务器敏感信息。</span>

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities