sap_igs_xxe

Атака XXE на SAP IGS: CVE-2018-2392 и CVE-2018-2393 Этот модуль в Metasploit Framework Документация Модуль Уязвимое приложение Этот модуль эксплуатирует CVE-2018-2392 и CVE-2018-2393, две XXE-уязвимости на странице XMLCHART серверов SAP Internet Graphics Servers IGS, работающих на версиях 7.20,...

SAP Internet Graphics Server (IGS) XMLCHART XXE

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Internet Graphics Server IGS XMLCHART XXE', 'Description' = %q This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities...

SAP Internet Graphics Server (IGS) XMLCHART XXE

This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities within the XMLCHART page of SAP Internet Graphics Servers IGS running versions 7.20, 7.20EXT, 7.45, 7.49, or 7.53. These vulnerabilities occur due to a lack of appropriate validation on the Extension HTML tag when...