Share
## https://sploitus.com/exploit?id=PACKETSTORM:172775
====================================================================================================================================  
| # Title : Magento eCommerce v 2.4.0 sensitive information disclosure Vulnerability |  
| # Author : indoushka |  
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 108.0(32-bit) |   
| # Vendor : https://devdocs.magento.com/ |   
| # Dork : Index of /var/log/ |  
====================================================================================================================================  
  
poc :   
  
  
[+] Keeping records in an unprotected folder, The logs contain sensitive information such as folder path,etc...  
  
[+] Dorking İn Google Or Other Search Enggine .  
  
[+] http://127.0.0.1/dawnfrozenfoods.com/var/log/  
  
  
Greetings to :=========================================================================================================================  
|  
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm* |   
|  
=======================================================================================================================================