POJIA破甲
地图 / File listing through scripts folder

File listing through scripts folder

信息泄露 / File and Directory Information Exposure / #2190117

厂商
Tennessee Valley Authority
严重程度
未评级
赏金
—
弱点
File and Directory Information Exposure
研究员
@itssixtynein
披露日期
2024-02-09
资产
http://tvavirtual.com
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1126 字符中的一小部分)
Summary: It's possible to list all hidden files that are located within the TVAVirtual.com Sharepoint folder structure.

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Tennessee Valley Authority 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @itssixtynein · 版权归作者与 Tennessee Valley Authority 所有

同类报告

Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://████U.S. Dept Of Defense · 2021-07-29Production Key and Data Found on Subdomain No Longer Operated by Shopify / Dangling DNSShopify · 2024-05-01Public and secret api key leaked via Solana BBP github repoSolana BBP · —Cookie exposure due to unexpected file permission changecurl · 2025-10-27LFI on Accounting server and RCE on FliteThermostat admin server50m-ctf · —Directory Listing at https://█.█.█.█8x8 · 2022-11-18