Hello team,
I have found source code disclosure bug in your site,Through Directory
listing.
Vulnerability - Source code disclosure through Directory Listing
Vulnerability URL - http://itikannur.kerala.gov.in/content/
Vulnerability severity - Critical
Description: Exposing the contents of a directory can lead to an attacker
gaining access to source code or providing useful information for the
attacker to devise exploits, such as creation times of files or any
information that may be encoded in file names. The directory listing may
also compromise private or confidential data.
Steps to reproduce: Open this link --
https://www.w3.org/config/
Impact - It can lead to an attacker gaining access to source code or
providing useful information for the attacker to devise exploits, such as
creation times of files or any information that may be encoded in file
names. The directory listing may also compromise private or confidential
data.
Poc Attached
