PHP info page disclosure

Disclosed: 2021-01-12 21:36:14 By ba56adcb299ff13a87475bf To deptofdefense
Medium
Vulnerability Details
##Summary: phpinfo() is a debug functionality that prints out detailed information on both the system and the PHP configuration. ##Step-by-step Reproduction Instructions 1.Go to https://███████phpinfo ## Impact An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version. •Details of the PHP configuration. •Loaded PHP extensions and their configurations. This information can help an attacker gain more information on the system. After gaining detailed information, the attacker can research known vulnerabilities for that system under review. The attacker can also use this information during the exploitation of other vulnerabilities
Actions
View on HackerOne
Report Stats
  • Report ID: 1050912
  • State: Closed
  • Substate: resolved
  • Upvotes: 5
Share this report