HexBrain

Nextcloud · Report #156510

Directory listening enabled in: 88.198.160.130

Validstatus
6upvotes
4 Sept 2016disclosed

How it was found

Summary:

The Directory Listing option is still enabled in the web server 88.198.160.130 , which displays all the files and folders contained in the directories: core apps config lib settings resources

PoC:

Visit the following links:

http://88.198.160.130/core/
http://88.198.160.130/apps/
http://88.198.160.130/config/
http://88.198.160.130/lib/
http://88.198.160.130/settings/
http://88.198.160.130/resources/

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original