Description
NCPortal portal/pt/menu/single/view 这个接口存在sql注入漏洞, <span style="color: rgb(48, 49, 51);">利用漏洞可以在目标服务器上执行任意代码，从而窃取服务器敏感信息。</span>
关于portal-menu-single-view接口存在sql注入漏洞修复方案
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Mr-xn/Penetration_Testing_POC
https://raw.githubusercontent.com/Mr-xn/Penetration_Testing_POC/master/books/%E5%AE%89%E5%85%A8%E4%BF%AE%E5%A4%8D%E5%BB%BA%E8%AE%AE%E5%8A%A0%E5%9B%BA%E6%96%B9%E6%A1%881.0.pdf
https://oneuptime.com/blog/post/2026-01-24-fix-sql-injection-vulnerabilities/view
https://www.acunetix.com/websitesecurity/sql-injection/
https://owasp.org/www-community/attacks/Blind_SQL_Injection