Arbitrary File Download

Questions or suggestions about the platform
Post Reply
c0rtePentest
Posts:38
Joined:Fri Oct 07, 2016 8:21 pm
Contact:
Contact c0rtePentest
Arbitrary File Download

Post by c0rtePentest » Mon Oct 23, 2017 10:43 pm

Does arbitrary file download is included in Improper Access Control?

For example i'm able to download server php files. This could leak database connections, credentials, etc.

Thanks.
Top
User avatar
x1admin
Site Admin
Posts:3102
Joined:Sun Nov 15, 2015 7:04 pm

Re: Arbitrary File Download

Post by x1admin » Tue Oct 24, 2017 8:21 am

c0rtePentest wrote: ↑
Mon Oct 23, 2017 10:43 pm
 Does arbitrary file download is included in Improper Access Control?

For example i'm able to download server php files. This could leak database connections, credentials, etc.

Thanks.
pls report vulnerability we check and discuss
Top
Post Reply

Return to “OpenBugBounty Platform”

Who is online

Users browsing this forum: Bing [Bot] and 2 guests