Possible server path disclosure (Windows)

Description

During the scan, Kayran managed to find a Possible server path disclosure (Windows) vulnerability.
Full Path Disclosure (FPD) vulnerabilities allows the attacker to get the path that leads to the webroot/file.

The risks of such types of attacks can yield several results. For example, if the webroot is getting leaked, attackers may abuse this knowledge and use it in combination with other vulnerabilities.

Information Disclosure occurs when a website unintentionally reveals sensitive information to its users.
Information disclosure can occur in various cases. For example, Sensitive information resources or messages that are unintentionally being displayed to unauthorized users. Therefore, the Possible server path disclosure takes place.

Recommendation

To prevent this vulnerability, make sure that the server displays a generic, simple message and does not reveal any sensitive information about the server.

References

https://owasp.org/www-community/attacks/Full_Path_Disclosure

< Return to all Vulnerabilities

The Cloud

I’m pretty sure there isn’t a single adult in the world who hasn’t at least heard of The Cloud. Explaining “The Cloud” in 2022 may

Read More »

SQLI to RCE

How to preform SQLI TO RCE? One of the most interesting and important things about any site is the database. So, it’s important to protect

Read More »