Multiple sub domain are vulnerable because of leaking full path

Disclosed: 2015-06-25 09:37:42 By digitalsurgn To udemy
Unknown
Vulnerability Details
At the following address i have found debug.log file disclose the application full path onthe server. https://business.udemy.com/wp-content/debug.log http://about.udemy.com/wp-content/debug.log THe below URLs showing the version number of the application : http://about.udemy.com/readme.html http://about.udemy.com/wp-content/plugins/all-in-one-seo-pack/readme.txt
Actions
View on HackerOne
Report Stats
  • Report ID: 62778
  • State: Closed
  • Substate: resolved
  • Upvotes: 2
Share this report