adobe connect 10 Local Path Disclosure

2021.02.04

mahdi eidi (FR)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

# Exploit Title:  adobe connect 10 Local Path Disclosure
# Date: 2021/02/02
# Exploit Author: mahdi eidi
# Vendor Homepage: https://www.adobe.com
# Software Link:  https://www.adobe.com/products/adobeconnect.html
# Version: 10 and earlier
# Tested on: Windows 10 & firefox
# Category : Web Application Bugs

# Description:
By adding this (system/help/support) path to the end of the main web address (url) you can see the administrator username.Even without a username and password

# demo :
>https://npac.mapnanyp.com/system/help/support
>https://vc.shdu.ac.ir/system/help/support

See this note in RAW Version

Vote for this issue:

62%

38%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

adobe connect 10 Local Path Disclosure

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.