In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ../ directory traversal in the username field. Reading ServerParameters.xml may reveal administrator credentials in cleartext or with MD5 hashing.

Image Hunter

Image Hunter is a one-stop-shop for all your imagery and elevation data needs. These short videos will help you make the most of our search engine, from saving imagery searches to submitting your quote. If you have any questions that are not answered here, please send us an email at sales@apollomapping.com.