Possible server path disclosure (Windows)


During the scan, Kayran managed to find a Possible server path disclosure (Windows) vulnerability.
Full Path Disclosure (FPD) vulnerabilities allows the attacker to get the path that leads to the webroot/file.

The risks of such types of attacks can yield several results. For example, if the webroot is getting leaked, attackers may abuse this knowledge and use it in combination with other vulnerabilities.

Information Disclosure occurs when a website unintentionally reveals sensitive information to its users.
Information disclosure can occur in various cases. For example, Sensitive information resources or messages that are unintentionally being displayed to unauthorized users. Therefore, the Possible server path disclosure takes place.


To prevent this vulnerability, make sure that the server displays a generic, simple message and does not reveal any sensitive information about the server.



< Return to all Vulnerabilities


You must have once wondered what HTTP means and what is the difference between that ugly word to HTTPS, and if not, then please read

Read More »

Man-In-The-Middle Attacks

Do you know these people who just push themselves into conversations?That’s Man-In-The-Middle Attacks. And from a wider angle, Man-In-The-Middle Attacks, or MITM, are built around

Read More »