Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > ISPConfig 3 Priority Support

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 23rd April 2013, 22:58
Fluotonic Fluotonic is offline
Junior Member
 
Join Date: Jan 2013
Posts: 27
Thanks: 4
Thanked 0 Times in 0 Posts
Default /mail folder publicly accessible!!!

Hi guys,

I just noticed a serious problem in my server config: when I type in the following address to access my website, I get access to the full directory and can download all php files!

The address looks like this (fake domain)
https://my-site.tld:8080/mail/

If I go in the parent directory, I land in the ISPConfig admin interface, which is OK.

I have an SSL certificate in place and it works perfectly for my domain otherwise.

Please help me, I'm a bit stressed with this leak I just discovered. I might have made a mistake in my config...

Thanks!
Reply With Quote
Sponsored Links
 

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
I want to run a backup script, what folder would be best to place it in? chaloum General 8 20th March 2012 17:08
Virtual Users And Domains With Postfix, Courier, MySQL And SquirrelMail -Ubuntu 8.04 c4rdinal HOWTO-Related Questions 112 23rd August 2011 11:49
Images not served by apache over a symbolic link folder hhhhhh Server Operation 0 27th January 2009 05:01
URGENT!! Website no longer publicly accessible captnops Installation/Configuration 3 18th January 2008 23:35
Rename folder -> create new folder equals contents of old folder BlueStream General 20 15th December 2006 04:32


All times are GMT +2. The time now is 03:40.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.