HexBrain

MTN Group · Report #762118

Upload directory of Mtn.ci

Validstatus
mediumseverity
7upvotes
5 Feb 2020disclosed

How it was found

Summary:

Upload directory of Mtn.co.sz has listing enabled

Steps To Reproduce:

  1. Just go to https://www.mtn.ci/wp-content/uploads/ and navigate between available folders

Impact

Every data uploaded by the webmaster can be accessible through this directory listing vulnerability This might include several private/confidential data

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original