天地伟业技术有限公司 天地伟业easy7综合管理平台系统存在信息泄露漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.cnvd.org.cn/flaw/show/CNVD-2021-39060
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-15546
• https://mrxn.net/tag/%E6%BC%8F%E6%B4%9E
• https://avd.aliyun.com/detail?id=AVD-2021-910451
• https://github.com/Mr-xn/Penetration_Testing_POC/blob/master/README.md
• https://www.ddpoc.com/DVB-2024-6710.html
• https://qkl.seebug.org/vuldb/ssvid-90855
• https://cn-sec.com/archives/tag/%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E/page/2
• https://vulners.com/cnvd/CNVD-2021-39060

Related Vulnerabilities

• 天地伟业Easy7 /Easy7/rest/file/uploadCustomIcon 文件上传漏洞
• 天地伟业 Easy7 /Easy7/rest/downLoad/downLoadImage 文件读取漏洞
• 天地伟业 /Easy7/rest/itsFacility/query SQL 注入漏洞
• PoC天地伟业Easy7 IsPermissible 存在SQL注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/getInquestIdByRoomId SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/getInquestRoomChannelInfo SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/queryRoomName SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/inquestRoom/queryRoomConfigs SQL 注入漏洞
• 天地伟业Easy7 /Easy7/rest/inquestRoom/isHashCameraAuth SQL 注入漏洞
• PoC天地伟业Easy7 /Easy7/rest/file/uploadLedImage 文件上传漏洞
• PoC天地伟业Easy7 /Easy7/rest/file/capture 命令执行漏洞
• 天地伟业Easy7 uploadLedImage 文件上传漏洞
• 天地伟业Easy7 getConfigInfoList 存在SQL注入漏洞