[Cedalion]

I recently performed a casual vulnerability scan on the Colombian National Learning Service (SENA) page, recently migrated and renamed (ZAJUNA). SENA is a crucial public institution for education in Colombia.

During the analysis, I discovered several vulnerabilities that could compromise the security of the site:

- Also the passwords of the hosting service were leaked in the past, it was from 000webhost.
- The directories are exposed, in addition to the non-existence of files for your security.
- Subdomains found (some no longer work):
agencypublicadeempleo.sena.edu.co
*.bdigital.sena.edu.co
clonlms.sena.edu.co
clonscorms.sena.edu.co
clonvideo.sena.edu.co
dev-km.sena.edu.co
dmae1.sena.edu.co
entrepreneurs.sena.edu.co
expwye.sena.edu.co
km.sena.edu.co
livesive.sena.edu.co
mail.sena.edu.co
midisco.sena.edu.co
platformfd.sena.edu.co
Platformfd.sena.edu.co
repositorio.sena.edu.co
digitalmagazine.sena.edu.co
selectronica.sena.edu.co
seminarave2021.sena.edu.co
sena.edu.co
senalms-territorium2019.sena.edu.co
sios.sena.edu.co
test-km.sena.edu.co
test-sios.sena.edu.co
www.revistadigital.sena.edu.co

cpanel:
https://p3plzcpnl474231.prod.phx3.secure....net:2083/

https://qu.ax/wjfG.png
https://qu.ax/fXcV.png
https://qu.ax/nXjS.png
https://qu.ax/qbxU.png

If you want a little more information about the data found, you can contact me.

[WillyWonka]

@Cedalion

Your thread was moved to giveaways and freebies as it fits better.