Description
大唐电信NVS3000综合视频监控平台 getDepResList 存在SQL注入漏洞，攻击者可通过构造恶意请求获取数据库敏感信息。
大唐电信NVS3000综合视频监控平台 getDepResList 存在SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/adysec/POC/blob/main/wpoc/%E5%A4%A7%E5%94%90%E7%94%B5%E4%BF%A1/%E5%A4%A7%E5%94%90%E7%94%B5%E4%BF%A1NVS3000%E7%BB%BC%E5%90%88%E8%A7%86%E9%A2%91%E7%9B%91%E6%8E%A7%E5%B9%B3%E5%8F%B0getDepResList%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://security.bnu.edu.cn/ldgg/118965.html
https://wiki.shikangsi.com/profile/924/
https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.10
https://www.gitlink.org.cn/dnrops/wy876_POC