AUTHOR: FlyingFrog
Twitter: @ItsKarl0z
++ SAP Crystal report access ++
inurl:apspassword
- open SAP crystal databases to browse
- Possible SQL Injection
- Sensitive information
- Possible Cross-Site Scripting
- https://www.exploit-db.com/exploits/32882
- Possible Directory Traversal
- https://www.exploit-db.com/exploits/16054
- 48 results at the time of writing
DISCLAIMER:
(The vulnerabilities are suggestions, none of them have been tested by me,
always request permission before testing anything on someone else system)
Credit goes to the boys of Rapid7
