HexBrain

Udemy · Report #135620

Showing Up Source Code

Informativestatus
3upvotes
4 May 2017disclosed

How it was found

Hello Sir! I have just seen vulnerability in your website: https://blog.udemy.com in this website your website is showing the PHP code of a file named [wordpress-importer.php] link of this file is listed below: https://blog.udemy.com/wp-content/uploads/2010/09/wordpress-importer.php_.txt I have also attached the proof of concept you can see. Solve Your Issue as soon as possible because a hacker can attack your website by knowing that this is WordPress website and he may find vulnerability in the WordPress he can exploit that vulnerability in your website also Waiting For Your Reply.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original