sap_bo_launchpad-ssrf-timing_attack

SAP BusinessObjects Launchpad SSRF и Timing Attack PoC Этот скрипт на Python является доказательством концепции PoC для выполнения SSRF подделка запросов на стороне сервера и атак по времени Timing Attack против SAP BusinessObjects Launchpad. Он предназначен для помощи исследователям безопасности...

CVE-2022-39800

SAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the network. On successful exploitation, an attacker can view or modify information causing a limited...

SAP BusinessObjects BI LaunchPad 跨站脚本漏洞

SAP BusinessObjects BI LaunchPad is a standard Web portal for users of the SAP BusinessObjects Business Intelligence BI platform from SAP. A code execution vulnerability exists in SAP BusinessObjects BI LaunchPad versions 420 and 430, which stems from failure to properly clean up user input when...