CVE-2020-6308-PoC

CVE-2020-6308 SAP POC SAP BusinessObjects Business Intelligence Platform（Web 服务）版本 410、420、430 存在漏洞，允许未经身份验证的攻击者注入任意值作为 CMS 参数，从而对内部网络进行查询，而这些查询通常无法从外部访问。在推特上关注我或私信提问：https://twitter.com/initroott 我于 2020 年 5 月向 SAP 报告了此问题，补丁于 2020 年 10 月发布。你可以继续开发自己的 PoC，不过我会提供一些背景信息。 CMS...

CVE-2020-6308

SAP BusinessObjects Business Intelligence Platform Web Services versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful exploitation, attacker c...

CVE-2023-27894

SAP BusinessObjects Business Intelligence Platform Web Services - versions 420, 430, allows an attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful exploitation, attacker can scan internal...

Exploit for Server-Side Request Forgery in Sap Businessobjects_Business_Intelligence_Platform

CVE-2020-6308 SAP POC !Follow on Twitterhttps://img.shields...