Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCmedium

[webapps] Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF

Exploit-DB ()1
Read at exploit-db.com
AI summary · glm-5.3Summaries by Vani AI

Exploit demonstrates arbitrary file read via SSRF in Planyo Online Reservation System 3.0.

Exploit-DB entry 52636 documents an arbitrary file read vulnerability in Planyo Online Reservation System version 3.0, reachable through a server-side request forgery condition. The public PoC shows how the web application can be manipulated to fetch and disclose local files. Sites running the vulnerable version could expose sensitive server files.

Key facts
  • Arbitrary file read via SSRF in Planyo 3.0
  • Public exploit available on Exploit-DB
  • Could disclose sensitive local files on affected servers
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
file-readplanyopocreservation-systemssrfwebapps

From the original article

Planyo_Online_Reservation_System 3. 0 - Arbitrary File Read via SSRF

Exploit-DB

exploit-db.com

Read the full article at Exploit-DB

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.