n3xtgenh4cker/cve-2020-0618_detectionLightweight Python PoC to detect CVE-2020-0618 Remote Code Execution vulnerability in Microsoft SQL Server Reporting Services via SOAP API path validation check.
This is a simple PoC to detect CVE-2020-0618, a Remote Code Execution vulnerability affecting Microsoft SQL Server Reporting Services (SSRS).
The vulnerability exists due to improper path validation in the LoadReport() SOAP API. If vulnerable, it could potentially lead to remote code execution under the context of the SQL Server Reporting Services account.
requests Python librarypython3 cve_2020_0618_poc.py <target_URL>
python3 cve_2020_0618_poc.py http://xxx.xxx.xxx.xx/ReportServer/