Nextcloud: Directory listening enabled in: 88.198.160.130

2016-08-04T14:18:19
ID H1:156510
Type hackerone
Reporter sandh0t
Modified 2016-09-04T12:39:10

Description

Summary:

The Directory Listing option is still enabled in the web server 88.198.160.130 , which displays all the files and folders contained in the directories: core apps config lib settings resources

PoC:

Visit the following links: http://88.198.160.130/core/ http://88.198.160.130/apps/ http://88.198.160.130/config/ http://88.198.160.130/lib/ http://88.198.160.130/settings/ http://88.198.160.130/resources/