天地伟业Easy7 loadAllUserBeans 敏感信息泄露

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://security.zone.ci/e/tags/?tagname=rest
• https://www.cnblogs.com/hacktwohub/p/19876614
• https://47.114.112.33/DVB-2024-8613.html
• https://ddpoc.com/DVB-2024-7615.html
• https://www.ddpoc.com/DVB-2024-6951.html
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-39060
• https://security.zone.ci/secarticles/wx/511883.html
• https://security.zone.ci/secarticles/wx/508956.html

Related Vulnerabilities

• 天地伟业Easy7 /Easy7/rest/file/uploadCustomIcon 文件上传漏洞
• 天地伟业 Easy7 /Easy7/rest/downLoad/downLoadImage 文件读取漏洞
• 天地伟业 /Easy7/rest/itsFacility/query SQL 注入漏洞
• PoC天地伟业Easy7 IsPermissible 存在SQL注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/getInquestIdByRoomId SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/getInquestRoomChannelInfo SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/queryRoomName SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/queryRoomConfigs SQL 注入漏洞
• 天地伟业Easy7 /Easy7/rest/inquestRoom/isHashCameraAuth SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/file/uploadLedImage 文件上传漏洞
• PoC天地伟业Easy7 /Easy7/rest/file/capture 命令执行漏洞
• 天地伟业Easy7 uploadLedImage 文件上传漏洞
• 天地伟业Easy7 getConfigInfoList 存在SQL注入漏洞