MTN Group · Report #760484
Upload directory of Mtn.co.sz has listing enabled
Validstatus
mediumseverity
4upvotes
5 Feb 2020disclosed
How it was found
Summary:
There are some exposed files accessible for anyone
Steps To Reproduce:
Go to http://www.mtn.co.sz/wp-content/uploads/ and navigate between available folders
Impact
Every uploaded data can be accessible through this directory listing vulnerability This might include several private/confidential data