Description 帆软FineReportV9文件覆盖导致GetShell漏洞。可以发送恶意webshell覆盖原有文件,黑客可以获取系统权限等,从而控制整个服务器:获取数据、修改数据、删除数据等
Related Vulnerabilities帆软报表存在未授权访问漏洞finereport-directory-traversal: Finereport Directory Traversaliis-put-getshell: IIS Put GetshellPoCCNVD-2018-04757: 帆软报表 V8 get_geo_json 任意文件读取漏洞PoCfanruan-finereport-fr-log-rce: 帆软 FineReport Fr Log RcePoCfanruan-oa-v9-designsavevg-upload-file: 帆软报表 V9 design_save_svg 任意文件覆盖文件上传PoCseeyon-fanruan-report-server-directory-travesal: 致远OA 帆软组件 ReportServer 目录遍历漏洞PoCtongda-insert-sql-inject-getshell: 通达OA v11.6 insert SQL注入漏洞PoCwanhu-oa-attachmentserver-upload-file: 万户 OA 前台无条件 GETSHELLPoCwanhu-oa-officeserverservlet-upload-file: 万户 OA 前台无条件 GETSHELLPoCfine-report-v9-file-upload: FineReport v9 Arbitrary File OverwritePoCfinereport-path-traversal: FineReport 8.0 - Local File InclusionPoCfinereport-sqli-rce: FineReport SQLi - Remote Code Execution