HexBrain

MTN Group · Report #760484

Upload directory of Mtn.co.sz has listing enabled

Validstatus
mediumseverity
4upvotes
5 Feb 2020disclosed

How it was found

Summary:

There are some exposed files accessible for anyone

Steps To Reproduce:

Go to http://www.mtn.co.sz/wp-content/uploads/ and navigate between available folders

Impact

Every uploaded data can be accessible through this directory listing vulnerability This might include several private/confidential data

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original