References https://mrxn.net/jswz/easy7-rest-inquestRoom-queryRoomConfigs-sqli.html https://github.com/Mr-xn/Penetration_Testing_POC/blob/master/README.md https://cn-sec.com/archives/5199105.html https://www.gm7.org/archives/93176 https://www.ddpoc.com/DVB-2026-11099.html https://mrxn.net/ https://cn-sec.com/archives/tag/sql%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E
Related Vulnerabilities天地伟业Easy7 /Easy7/rest/file/uploadCustomIcon 文件上传漏洞天地伟业 Easy7 /Easy7/rest/downLoad/downLoadImage 文件读取漏洞天地伟业 /Easy7/rest/itsFacility/query SQL 注入漏洞PoC天地伟业Easy7 IsPermissible 存在SQL注入漏洞PoC天地伟业Easy7 /Easy7/rest/inquestRoom/getInquestIdByRoomId SQL 注入漏洞PoC天地伟业Easy7 /Easy7/rest/inquestRoom/getInquestRoomChannelInfo SQL 注入漏洞PoC天地伟业Easy7 /Easy7/rest/inquestRoom/queryRoomName SQL 注入漏洞PoC天地伟业Easy7 /Easy7/rest/inquestRoom/queryRoomConfigs SQL 注入漏洞天地伟业Easy7 /Easy7/rest/inquestRoom/isHashCameraAuth SQL 注入漏洞PoC天地伟业Easy7 /Easy7/rest/file/uploadLedImage 文件上传漏洞PoC天地伟业Easy7 /Easy7/rest/file/capture 命令执行漏洞天地伟业Easy7 uploadLedImage 文件上传漏洞天地伟业Easy7 getConfigInfoList 存在SQL注入漏洞