sap_igs_xxe

SAP IGS XXE 攻击 CVE-2018-2392 和 CVE-2018-2393 Metasploit Framework 中的此模块 文档 模块 易受攻击的应用程序 该模块利用了 CVE-2018-2392 和 CVE-2018-2393，这是 SAP Internet Graphics Servers IGS 运行版本 7.20、7.20EXT、7.45、7.49 或 7.53 的 XMLCHART 页面中的两个 XXE 漏洞。这些漏洞是由于在向 XMLCHART 页面提交 POST 请求以生成新图表时，未对 Extension HTML 标签进行适当验证而导致的。...

SAP Internet Graphics Server (IGS) XMLCHART XXE

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Internet Graphics Server IGS XMLCHART XXE', 'Description' = %q This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities...

SAP Internet Graphics Server (IGS) XMLCHART XXE

This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities within the XMLCHART page of SAP Internet Graphics Servers IGS running versions 7.20, 7.20EXT, 7.45, 7.49, or 7.53. These vulnerabilities occur due to a lack of appropriate validation on the Extension HTML tag when...