Does arbitrary file download is included in Improper Access Control?
For example i'm able to download server php files. This could leak database connections, credentials, etc.
Thanks.
Arbitrary File Download
-
- Posts:38
- Joined:Fri Oct 07, 2016 8:21 pm
- Contact:
Re: Arbitrary File Download
pls report vulnerability we check and discussc0rtePentest wrote: ↑Mon Oct 23, 2017 10:43 pmDoes arbitrary file download is included in Improper Access Control?
For example i'm able to download server php files. This could leak database connections, credentials, etc.
Thanks.
Who is online
Users browsing this forum: No registered users and 2 guests