Microsoft SQL Server Reporting Services Remote OS Command Injection Exploit

This module exploits a deserialization vulnerability present in the BrowserNavigationCorrector class of Microsoft SQL Server Reporting Services to deploy an agent. The deployed agent will run with the Report Server service account privileges.
Exploit Platform
Product Name