Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-49980 — Proof-of-concept for CVE-2023-49980: directory listing vulnerability in Best Student Result Management System 1.0 allowing unauthorized access to sensitive files via /includes/ and /assets/ paths. | Kitploit
Tools/GitHubGitHub/geraldoalcantara/cve-2023-49980
Vulnerability AnalysisInformation GatheringWeb SecurityPenetration TestingMisconfiguration
GitHubgeraldoalcantara/cve-2023-49980

CVE-2023-49980

Proof-of-concept for CVE-2023-49980: directory listing vulnerability in Best Student Result Management System 1.0 allowing unauthorized access to sensitive files via /includes/ and /assets/ paths.

View Repository
22 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-49980

Best Student Result Management System 1.0 - Directory Listing

Description: Best Student Result Management System 1.0 is vulnerable to Broken Access Control. The Directory Listing vulnerability allows any remote attacker to view the application's sensitive files within the includes and assets directories of the application without any authorization.

Vulnerable Product Version: Best Student Result Management System 1.0
CVE Author: Geraldo Alcântara
Date: 28/11/2023
Confirmed on: 19/12/2023
CVE: CVE-2023-49980
Tested on: Windows

Steps to reproduce:

  1. Navigate to URL: http://{IP}/upresult/includes/ or http://{IP}/upresult/assets/. I found out that many important files of application can be accessed directly from this directory listing.

Accessing the directory /includes/
dir01

Accessing the directory /assets/
dir02

Discoverer(s)/Credits:
Geraldo Alcântara

Download Tool