Udemy · Report #135620
Showing Up Source Code
Informativestatus
3upvotes
4 May 2017disclosed
How it was found
Hello Sir! I have just seen vulnerability in your website: https://blog.udemy.com in this website your website is showing the PHP code of a file named [wordpress-importer.php] link of this file is listed below: https://blog.udemy.com/wp-content/uploads/2010/09/wordpress-importer.php_.txt I have also attached the proof of concept you can see. Solve Your Issue as soon as possible because a hacker can attack your website by knowing that this is WordPress website and he may find vulnerability in the WordPress he can exploit that vulnerability in your website also Waiting For Your Reply.