Description
赛普 EAP 系统中，/IDWebSoft/AppData.ashx 接口存在 SQL 注入漏洞，该接口在处理用户提交的参数时未进行充分的过滤和参数化处理，攻击者可构造恶意 SQL 语句注入后台数据库查询，从而非法获取数据库中的敏感数据。
赛普EAP /IDWebSoft/AppData.ashx SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cloud.tencent.com/developer/article/2597924
https://github.com/tanjiti/sec_profile/blob/main/README_202512.md
https://www.gm7.org/archives/13661
https://zone.ci/secarticles/wx/477802.html
https://bdziyi.com/61492/
https://idocdown.com/app/articles/blogs/detail/17530