CVE-2020-0618

Related Files

Microsoft SQL Server Reporting Services 2016 Remote Code Execution

Posted Sep 17, 2020

Authored by West Shepherd

Microsoft SQL Server Reporting Services 2016 suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2020-0618

SHA-256 | 93564e79a307b8bac5558370f2e6f6dbb0adb08abf21e7e8df7922faa0fca119

Download | Favorite | View

SQL Server Reporting Services (SSRS) ViewState Deserialization

Posted Mar 12, 2020

Authored by Soroush Dalili, Spencer McIntyre | Site metasploit.com

A vulnerability exists within Microsoft's SQL Server Reporting Services which can allow an attacker to craft an HTTP POST request with a serialized object to achieve remote code execution. The vulnerability is due to the fact that the serialized blob is not signed by the server.

tags | exploit, remote, web, code execution

advisories | CVE-2020-0618

SHA-256 | 6a7a492f2dc70d4a79f4f4220d5e1a617458fbab09046134c7b6d7f120a2b5aa

Download | Favorite | View