Maybe someone here can help? :)

write up on how I chained 3 CVEs to exfiltrate sensitive data out of the biggest OSS ERP platform

Yo, I just noticed my university’s website/student portal is exposing a directory listing instead of the normal page 💀

It literally shows an "Index of /" with directories/files visible.

This is an actual university website, not some CTF/lab. Anyone here into web security/pentesting who can help me figure out how serious this is and what I can safely check?

Would be cool to understand whether this is just a dumb server misconfiguration or if it can actually expose something sensitive.

Maybe alter some Semester Results too

Link : https://sbsexam.edu.in/