References https://mrxn.net/jswz/yonyou-OAUserQryServlet-rce-sqli.html https://github.com/bmth666/Yongyou-Unserialize-plus https://disk.scan.cm/All_wiki/%E4%BD%A9%E5%A5%87PeiQi-WIKI-POC-2021-7-20%E6%BC%8F%E6%B4%9E%E5%BA%93/PeiQi_Wiki/OA%E4%BA%A7%E5%93%81%E6%BC%8F%E6%B4%9E/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8B%20NC%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96RCE%E6%BC%8F%E6%B4%9E.md https://blog.csdn.net/qq_39573664/article/details/135362806 https://zgao.top/%E7%94%A8%E5%8F%8B%E5%A4%9A%E4%B8%AA%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%E5%90%88%E9%9B%86/ https://nosec.org/m/share/4472.html https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E7%94%A8%E5%8F%8Bnc/%E7%94%A8%E5%8F%8Bnc%206.5%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E/ https://blog.nsfocus.net/nc/ https://cn-sec.com/archives/4597945.html
Related Vulnerabilities用友NC /uapws/service/nc.itf.msgcenter.IMsgCenterWebService SQL 注入漏洞用友NC /lfw/chart XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bap.oba.IObaExcelService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICustomerImportToNcService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICurrtypeExportToCrmService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.ICustomerExportToCrmService SQL 注入漏洞用友 NC /uapws/service/nc.uap.oba.word.webservice.IServiceEntryPoint XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bap.oba.IObaWordService XML 外部实体注入漏洞用友 NC /uapws/service/nc.itf.bd.crm.IPsndocExportToCrmService XML 外部实体注入漏洞用友 NC /uapws/service/nc.uap.oba.wordWebservice.IServiceEntry XML 外部实体注入漏洞用友NC Cloud /ncchr/pm/ref/indiIssued/blobRefClassSearch 代码执行漏洞用友NC /portal/pt/M0dUlE/redeploy SQL 注入漏洞