Generalized Reader Education System/target/lres/study/datumdownload.html?type_id=3 page with SQL injection vulnerability of Nanjing Oncor Technology Co.

Nanjing Oncor Technology Co., Ltd Esmay Reader Education System is a set of library reader education system. The system/target/lres/study/datumdownload.html?typeid=3 page has a SQL injection vulnerability. An attacker can remotely exploit the vulnerability to obtain sensitive database information...