Tracer_mu.md

Online Graduate Tracer System exists directory traversal

submitter

zhangMingMing

supplier

https://www.sourcecodester.com/php/15904/online-graduate-tracer-system-college-ict-alumni.html

Vulnerability file

/tracking/nbproject/

describe

An unrestricted directory traversal attack exists in Online Graduate Tracer System. An attacker can obtain sensitive server information through this vulnerability.

POC

Directly access the /tracking/nbproject/ path