HexBrain

Nextcloud · Report #161323

Content Injection - demo.nextcloud.com

Validstatus
1upvotes
26 Aug 2016disclosed

How it was found

Hi there,

Similar as report #161299 , but in this case it's possible to inject the 403 Forbidden page.

URL: https://demo.nextcloud.com/.htacess%20Content%20Injection%20test

Thanks!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original