Mailman Information Disclosure

2020.12.04
us Nano (US) us
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: N/A
Dork: Inurl:"mailman/listinfo" "mailman"

This vulnerable really only works for servers that have cpanel running or installed. Top shared hosting sites that resell cpanel. Godaddy,Namecheap,OVHNET The leakage occurs when the Mailman Archives lead back to the origin server. Directory : /mailman/listinfo/mailman Exploiter : https://github.com/Proxysec/cloudssp I found this about 2 years ago just always privated it. This works for sites that use cloudflare. Credits to Nano


See this note in RAW Version
Vote for this issue:
100%
0%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top