| शीर्षक | SourceCodester Prison Management System 1.0 Exposure of Information Through Directory Listing |
|---|
| विवरण | A Directory Listing vulnerability has been discovered in the SourceCodester Prison Management System version 1.0. This vulnerability allows a remote attacker to gain unauthorized access to sensitive files within the application's uploadImage/Profile/ directory. Due to improper access control settings, the contents of this directory can be listed and viewed by any unauthenticated user. This could potentially expose sensitive information, such as uploaded profile images, which may contain personal or confidential data. The exploitation of this vulnerability could lead to further attacks such as information disclosure, unauthorized access, and potential use of exposed data in phishing or other malicious activities. |
|---|
| स्रोत | ⚠️ https://github.com/CYB84/CVE_Writeup/blob/main/Directory%20Listing.md |
|---|
| उपयोगकर्ता | Raj Nandi (UID 73232) |
|---|
| सबमिशन | 14/08/2024 05:52 PM (2 साल पहले) |
|---|
| संयम | 14/08/2024 08:35 PM (3 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 274709 [SourceCodester Prison Management System 1.0 Profile Image /uploadImage/Profile/ सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|