Authenticated RCE via stored queryerClass loading

Remote code execution in xianrendzw EasyReport 2.0.17.0522_Beta allows remote authenticated users to execute code via queryerClass values. DataSourceController.add stores an unvalidated queryerClass string, and QueryerFactory.create later passes that persisted class name to Class.forName, which initializes the named class and runs its static initializer. Exploitation requires Shiro-authenticated access with report.ds:add to plant the datasource and a later report or SQL path that loads it; the published proof of concept shows common report-management permissions are sufficient to reach the sink.