HexBrain

Localize · Report #7968

Sensitive file

Validstatus
5upvotes
18 Apr 2014disclosed

How it was found

A possible sensitive file has been found. This file is not directly linked from the website. This check looks for common sensitive resources like password files, configuration files, log files, include files, statistics data, database dumps. Each one of these files could help an attacker to learn more about his target. This vulnerability affects /.gitignore. HTML .idea/* temp// uploads/*.xml img/contact.php config.php

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original