Zhejiang Dahua Technology Co., Ltd. is the worldβs leading video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the Smart Park Integrated Management Platform of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database.