Описание
In Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which allows an attacker to view the sensitive files of the application, for example: Any file which contains sensitive information of the user or server.
Ссылки
- ExploitThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phpgurukul:bus_pass_management_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00291
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-552
Связанные уязвимости
CVSS3: 7.5
github
около 4 лет назад
In Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which allows an attacker to view the sensitive files of the application, for example: Any file which contains sensitive information of the user or server.
EPSS
Процентиль: 52%
0.00291
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-552