Description
用友NC中存在SQL注入漏洞，此漏洞是由于linkVoucher未充分验证用户输入的数据所导致的。
用友NC linkVoucher SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/zan8in/wy876-POC/blob/main/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BNC%E7%B3%BB%E7%BB%9FlinkVoucher%E5%AD%98%E5%9C%A8sql%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/mashiro_hibiki/article/details/144143635
https://www.sxxdckj.com/cms/a/yong-you-wang-luo-ke-ji-gu-fen-you-xian-gong-si-yong-you-NC-cun-zai-SQL-zhu-ru-lou-dong-CNVD-2024-31573.html
https://www.cnvd.org.cn/flaw/show/CNVD-2024-49423
https://qkl.seebug.org/vuldb/ssvid-93323
https://cloud.tencent.com/developer/article/2443503
https://www.cnblogs.com/spmonkey/p/17550315.html
https://zgao.top/%E7%94%A8%E5%8F%8B%E5%A4%9A%E4%B8%AA%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%E5%90%88%E9%9B%86/
https://www.ufida168.com/case_detail/3470.html
https://avd.aliyun.com/detail?id=AVD-2024-1738935
https://mrxn.net/jswz/yonyou-nc-evalschedule-pkevalset-sqli.html
https://www.secevery.com/toBugInfo?id=1800764622542905345
https://www.aqtd.com/nd.jsp?id=5232
https://nic.oit.edu.cn/info/1038/3771.htm
https://bbs.decoyit.com/thread-587-1-1.html
https://cn-sec.com/archives/2772494.html
https://www.gitlink.org.cn/dnrops/wy876_POC