CVE-2021-48014

FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...

CVE-2021-48014

FineReport 9.0 is affected by a path traversal vulnerability within the /WebReport/ReportServer design_save_svg operation. This flaw allows unauthenticated attackers to write arbitrary files by providing directory traversal sequences in the filePath parameter. By sending a POST request containing...

EUVD-2021-34897

FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...

FineReport 8.0 - Local File Inclusion Detection

FIneReport 8.0 is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """FIneReport 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FineReport 8.0 - Local File Inclusion Detection',...

FineReport: undisclosed vulnerability (ZAI-2026-PF4DRN)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-88NSND)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-440J66)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-JAK0UA)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-ZEZS2N)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-DXEKXJ)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-14R4V3)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-GKCDFV)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-27A6FJ)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-2J874U)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-4Z2AN0)

Not disclosed. Details are not yet publicly disclosed...

FineReport: undisclosed vulnerability (ZAI-2026-LMZN40)

Not disclosed. Details are not yet publicly disclosed...

Command Injection Vulnerability in FineReport, FineBI, and FineDataLink of SailSoft Software Ltd.

FineReport is a leading enterprise-grade web reporting tool.FineBI is a new generation of self-service BI tools.FineDataLink is a low-code/high-time-efficiency enterprise-grade one-stop data integration and governance platform product. A command injection vulnerability exists in FineReport, FineB...

EUVD-2024-31188

Malicious code in bioql PyPI...

CVE-2024-33450

SQL Injection in Finereport v.8.0 allows a remote attacker to obtain sensitive information...

SQL Injection Vulnerability in FineReport of SailSoft Software Limited (CNVD-2024-33679)

FineReport is reporting software tool. SQL injection vulnerability exists in FineReport of SailSoft Software Ltd. The vulnerability is due to the existence of unauthorized sql injection in the /view/ReportServer interface, which can be exploited by an attacker to write to a file using sql...