HexBrain

Nextcloud · Report #156425

demo.nextcloud.com: Content spoofing due to default Apache Error Page

Validstatus
1upvotes
30 Aug 2016disclosed

How it was found

Hello there , your site is vulnerable to phishing the users by this vulnerability.

proof of concept https://demo.nextcloud.com///Hello---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------our%20website%20is%20down%20now%20you%20can%20visit%20this%20domain%20mydomain.com%20as%20this%20domain%20doesn't%20exist%20.

Thanks !

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original