Apache
tcp/443 tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ed565223
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/KOSNOWMAN/CMBC_server.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522ed565223
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/KOSNOWMAN/CMBC_server.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Open service 14.63.198.18:80 · www.cbmc.app
2026-01-23 07:17
HTTP/1.1 302 Found
Date: Fri, 23 Jan 2026 07:17:58 GMT
Server: Apache
Location: https://www.cbmc.app/
Set-Cookie: cbmc_sess=n2md2usrjfth4emkhie0asjivl; path=/; domain=cbmc.app; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: cbmc_sess=n2md2usrjfth4emkhie0asjivl; path=/; domain=cbmc.app; HttpOnly
Content-Length: 3623
Connection: close
Content-Type: text/html; charset=UTF-8
Page title: CBMC
<!DOCTYPE html>
<html lang="en">
<head>
<title>CBMC</title>
<meta charset="utf-8">
<meta name='description' content='Connecting Business and Marketplace to Christ'>
<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge,Chrome=1" />
<meta property="og:url" content="https://cbmc.app/">
<meta property="og:title" content="CBMC">
<meta property="og:type" content="website">
<meta property="og:image" content="https://cbmc.app/images/CBMC_logo.png">
<meta property="og:description" content="Connecting Business and Marketplace to Christ">
<!-- Google Font: Source Sans Pro -->
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700&display=fallback">
<link href="https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@300;400;500;700&display=swap" rel="stylesheet">
<link rel="stylesheet" type="text/css" href="/common/fonts/s_core_dream/scoredream.css">
<link rel="stylesheet" type="text/css" href="/common/fonts/nanum-square/nanumsquare.css">
<link rel="stylesheet" type="text/css" href="/common/fonts/noto-sans-kr-v27-korean/notosanskorean.css">
<link rel="stylesheet" type="text/css" href="/common/css/styles.css">
<!-- Font Awesome Icons -->
<link rel="stylesheet" href="/plugins/fontawesome-free/css/all.min.css">
<!-- Theme style -->
<link rel="stylesheet" href="/dist/css/adminlte.min.css">
<!-- Toastr -->
<link rel="stylesheet" href="/plugins/toastr/toastr.min.css">
<link rel="stylesheet" href="/plugins/jquery-ui/jquery-ui.css">
<!-- jQuery -->
<script src="/plugins/jquery/jquery.min.js"></script>
<!-- jQuery UI 1.11.4 -->
<script src="/plugins/jquery-ui/jquery-ui.min.js"></script>
<!-- Resolve conflict in jQuery UI tooltip with Bootstrap tooltip -->
<script>
$.widget.bridge('uibutton', $.ui.button)
</script>
<!-- jQuery Form -->
<script src="/plugins/jquery/jquery.form.min.js"></script>
<!-- Bootstrap 4 -->
<script src="/plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
<!-- Toastr -->
<script src="/plugins/toastr/toastr.min.js"></script>
<!-- imgLiquid -->
<script src="/view/js/imgLiquid-min.js"></script>
<!-- AdminLTE App -->
<script src="/dist/js/adminlte.js"></script>
<!— Google Tag Manager —>
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-PPWCS73');</script>
<!— End Google Tag Manager —>
<style>
#toast-container > .toast-warning {
color: black !important;
background-color: rgba(255, 152, 0, 1) !important;
}
#toast-container > .toast-success {
color: black !important;
background-color: rgba(76, 175, 80, 1) !important;
}
#toast-container > .toast-error {
color: black !important;
background-color: rgba(244, 67, 54, 1) !important;
}
#toast-container > .toast-info {
color: black !important;
background-color: rgba(33, 150, 243, 1) !important;
}
</style>
</head>
<body class="hold-transition sidebar-mini layout-fixed layout-navbar-fixed layout-footer-fixed ">
<div class="wrapper">
<script>
window.location.href = '/backoffice/login.php';
</script>
Open service 14.63.198.18:443 · www.cbmc.app
2026-01-23 05:35
HTTP/1.1 200 OK
Date: Fri, 23 Jan 2026 05:35:57 GMT
Server: Apache
Set-Cookie: cbmc_sess=uhmu0g980fe3ipakvcdn8k3ame; path=/; domain=cbmc.app; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: cbmc_sess=uhmu0g980fe3ipakvcdn8k3ame; path=/; domain=cbmc.app; HttpOnly
Content-Length: 3623
Connection: close
Content-Type: text/html; charset=UTF-8
Page title: CBMC
<!DOCTYPE html>
<html lang="en">
<head>
<title>CBMC</title>
<meta charset="utf-8">
<meta name='description' content='Connecting Business and Marketplace to Christ'>
<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge,Chrome=1" />
<meta property="og:url" content="https://cbmc.app/">
<meta property="og:title" content="CBMC">
<meta property="og:type" content="website">
<meta property="og:image" content="https://cbmc.app/images/CBMC_logo.png">
<meta property="og:description" content="Connecting Business and Marketplace to Christ">
<!-- Google Font: Source Sans Pro -->
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700&display=fallback">
<link href="https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@300;400;500;700&display=swap" rel="stylesheet">
<link rel="stylesheet" type="text/css" href="/common/fonts/s_core_dream/scoredream.css">
<link rel="stylesheet" type="text/css" href="/common/fonts/nanum-square/nanumsquare.css">
<link rel="stylesheet" type="text/css" href="/common/fonts/noto-sans-kr-v27-korean/notosanskorean.css">
<link rel="stylesheet" type="text/css" href="/common/css/styles.css">
<!-- Font Awesome Icons -->
<link rel="stylesheet" href="/plugins/fontawesome-free/css/all.min.css">
<!-- Theme style -->
<link rel="stylesheet" href="/dist/css/adminlte.min.css">
<!-- Toastr -->
<link rel="stylesheet" href="/plugins/toastr/toastr.min.css">
<link rel="stylesheet" href="/plugins/jquery-ui/jquery-ui.css">
<!-- jQuery -->
<script src="/plugins/jquery/jquery.min.js"></script>
<!-- jQuery UI 1.11.4 -->
<script src="/plugins/jquery-ui/jquery-ui.min.js"></script>
<!-- Resolve conflict in jQuery UI tooltip with Bootstrap tooltip -->
<script>
$.widget.bridge('uibutton', $.ui.button)
</script>
<!-- jQuery Form -->
<script src="/plugins/jquery/jquery.form.min.js"></script>
<!-- Bootstrap 4 -->
<script src="/plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
<!-- Toastr -->
<script src="/plugins/toastr/toastr.min.js"></script>
<!-- imgLiquid -->
<script src="/view/js/imgLiquid-min.js"></script>
<!-- AdminLTE App -->
<script src="/dist/js/adminlte.js"></script>
<!— Google Tag Manager —>
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-PPWCS73');</script>
<!— End Google Tag Manager —>
<style>
#toast-container > .toast-warning {
color: black !important;
background-color: rgba(255, 152, 0, 1) !important;
}
#toast-container > .toast-success {
color: black !important;
background-color: rgba(76, 175, 80, 1) !important;
}
#toast-container > .toast-error {
color: black !important;
background-color: rgba(244, 67, 54, 1) !important;
}
#toast-container > .toast-info {
color: black !important;
background-color: rgba(33, 150, 243, 1) !important;
}
</style>
</head>
<body class="hold-transition sidebar-mini layout-fixed layout-navbar-fixed layout-footer-fixed ">
<div class="wrapper">
<script>
window.location.href = '/backoffice/login.php';
</script>
Open service 14.63.198.18:443 · www.cbmc.app
2026-01-22 20:07
HTTP/1.1 200 OK
Date: Thu, 22 Jan 2026 20:07:17 GMT
Server: Apache
Set-Cookie: cbmc_sess=gqijm371fakunsu25c0gs7rpoh; path=/; domain=cbmc.app; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: cbmc_sess=gqijm371fakunsu25c0gs7rpoh; path=/; domain=cbmc.app; HttpOnly
Content-Length: 3623
Connection: close
Content-Type: text/html; charset=UTF-8
Page title: CBMC
<!DOCTYPE html>
<html lang="en">
<head>
<title>CBMC</title>
<meta charset="utf-8">
<meta name='description' content='Connecting Business and Marketplace to Christ'>
<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge,Chrome=1" />
<meta property="og:url" content="https://cbmc.app/">
<meta property="og:title" content="CBMC">
<meta property="og:type" content="website">
<meta property="og:image" content="https://cbmc.app/images/CBMC_logo.png">
<meta property="og:description" content="Connecting Business and Marketplace to Christ">
<!-- Google Font: Source Sans Pro -->
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700&display=fallback">
<link href="https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@300;400;500;700&display=swap" rel="stylesheet">
<link rel="stylesheet" type="text/css" href="/common/fonts/s_core_dream/scoredream.css">
<link rel="stylesheet" type="text/css" href="/common/fonts/nanum-square/nanumsquare.css">
<link rel="stylesheet" type="text/css" href="/common/fonts/noto-sans-kr-v27-korean/notosanskorean.css">
<link rel="stylesheet" type="text/css" href="/common/css/styles.css">
<!-- Font Awesome Icons -->
<link rel="stylesheet" href="/plugins/fontawesome-free/css/all.min.css">
<!-- Theme style -->
<link rel="stylesheet" href="/dist/css/adminlte.min.css">
<!-- Toastr -->
<link rel="stylesheet" href="/plugins/toastr/toastr.min.css">
<link rel="stylesheet" href="/plugins/jquery-ui/jquery-ui.css">
<!-- jQuery -->
<script src="/plugins/jquery/jquery.min.js"></script>
<!-- jQuery UI 1.11.4 -->
<script src="/plugins/jquery-ui/jquery-ui.min.js"></script>
<!-- Resolve conflict in jQuery UI tooltip with Bootstrap tooltip -->
<script>
$.widget.bridge('uibutton', $.ui.button)
</script>
<!-- jQuery Form -->
<script src="/plugins/jquery/jquery.form.min.js"></script>
<!-- Bootstrap 4 -->
<script src="/plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
<!-- Toastr -->
<script src="/plugins/toastr/toastr.min.js"></script>
<!-- imgLiquid -->
<script src="/view/js/imgLiquid-min.js"></script>
<!-- AdminLTE App -->
<script src="/dist/js/adminlte.js"></script>
<!— Google Tag Manager —>
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-PPWCS73');</script>
<!— End Google Tag Manager —>
<style>
#toast-container > .toast-warning {
color: black !important;
background-color: rgba(255, 152, 0, 1) !important;
}
#toast-container > .toast-success {
color: black !important;
background-color: rgba(76, 175, 80, 1) !important;
}
#toast-container > .toast-error {
color: black !important;
background-color: rgba(244, 67, 54, 1) !important;
}
#toast-container > .toast-info {
color: black !important;
background-color: rgba(33, 150, 243, 1) !important;
}
</style>
</head>
<body class="hold-transition sidebar-mini layout-fixed layout-navbar-fixed layout-footer-fixed ">
<div class="wrapper">
<script>
window.location.href = '/backoffice/login.php';
</script>
Open service 14.63.198.18:80 · www.cbmc.app
2026-01-10 13:25
HTTP/1.1 302 Found
Date: Sat, 10 Jan 2026 13:25:57 GMT
Server: Apache
Location: https://www.cbmc.app/
Set-Cookie: cbmc_sess=2j2aoc3inh2c82eqqg3kgajjp5; path=/; domain=cbmc.app; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: cbmc_sess=2j2aoc3inh2c82eqqg3kgajjp5; path=/; domain=cbmc.app; HttpOnly
Content-Length: 3623
Connection: close
Content-Type: text/html; charset=UTF-8
Page title: CBMC
<!DOCTYPE html>
<html lang="en">
<head>
<title>CBMC</title>
<meta charset="utf-8">
<meta name='description' content='Connecting Business and Marketplace to Christ'>
<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge,Chrome=1" />
<meta property="og:url" content="https://cbmc.app/">
<meta property="og:title" content="CBMC">
<meta property="og:type" content="website">
<meta property="og:image" content="https://cbmc.app/images/CBMC_logo.png">
<meta property="og:description" content="Connecting Business and Marketplace to Christ">
<!-- Google Font: Source Sans Pro -->
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700&display=fallback">
<link href="https://fonts.googleapis.com/css2?family=Noto+Sans+JP:wght@300;400;500;700&display=swap" rel="stylesheet">
<link rel="stylesheet" type="text/css" href="/common/fonts/s_core_dream/scoredream.css">
<link rel="stylesheet" type="text/css" href="/common/fonts/nanum-square/nanumsquare.css">
<link rel="stylesheet" type="text/css" href="/common/fonts/noto-sans-kr-v27-korean/notosanskorean.css">
<link rel="stylesheet" type="text/css" href="/common/css/styles.css">
<!-- Font Awesome Icons -->
<link rel="stylesheet" href="/plugins/fontawesome-free/css/all.min.css">
<!-- Theme style -->
<link rel="stylesheet" href="/dist/css/adminlte.min.css">
<!-- Toastr -->
<link rel="stylesheet" href="/plugins/toastr/toastr.min.css">
<link rel="stylesheet" href="/plugins/jquery-ui/jquery-ui.css">
<!-- jQuery -->
<script src="/plugins/jquery/jquery.min.js"></script>
<!-- jQuery UI 1.11.4 -->
<script src="/plugins/jquery-ui/jquery-ui.min.js"></script>
<!-- Resolve conflict in jQuery UI tooltip with Bootstrap tooltip -->
<script>
$.widget.bridge('uibutton', $.ui.button)
</script>
<!-- jQuery Form -->
<script src="/plugins/jquery/jquery.form.min.js"></script>
<!-- Bootstrap 4 -->
<script src="/plugins/bootstrap/js/bootstrap.bundle.min.js"></script>
<!-- Toastr -->
<script src="/plugins/toastr/toastr.min.js"></script>
<!-- imgLiquid -->
<script src="/view/js/imgLiquid-min.js"></script>
<!-- AdminLTE App -->
<script src="/dist/js/adminlte.js"></script>
<!— Google Tag Manager —>
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-PPWCS73');</script>
<!— End Google Tag Manager —>
<style>
#toast-container > .toast-warning {
color: black !important;
background-color: rgba(255, 152, 0, 1) !important;
}
#toast-container > .toast-success {
color: black !important;
background-color: rgba(76, 175, 80, 1) !important;
}
#toast-container > .toast-error {
color: black !important;
background-color: rgba(244, 67, 54, 1) !important;
}
#toast-container > .toast-info {
color: black !important;
background-color: rgba(33, 150, 243, 1) !important;
}
</style>
</head>
<body class="hold-transition sidebar-mini layout-fixed layout-navbar-fixed layout-footer-fixed ">
<div class="wrapper">
<script>
window.location.href = '/backoffice/login.php';
</script>