Description
用友-NC-Cloud在/service/~aert/PMCloudDriveProjectStateServlet存在jndi注入，可以远程命令执行
用友NCCloud /PMCloudDriveProjectStateServlet 路径存在远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/spmonkey/p/18013576
https://www.ddpoc.com/DVB-2024-6388.html
https://zhuanlan.zhihu.com/p/645520783
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E7%94%A8%E5%8F%8B-NC-Cloud-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CNVD-C-2023-76801.md
https://stack.chaitin.com/poc/detail/4609
https://blog.csdn.net/qq_33608000/article/details/127156674
https://drea1v1.github.io/2020/06/17/%E7%94%A8%E5%8F%8Bnc%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/