Loading HuntDB...

Potentially vulnerable version of Apache software in and default files on https://iandunn.name/

I
Ian Dunn
Submitted None
Reported by ethnicalhacker

Vulnerability Details

Technical details and impact analysis

Information Disclosure
Hi, The underlying web server for https://iandunn.name/ is not configured to hide the version of Apache in place. As a result, when attempts are made for the following files, a verbose response is received revealing the underlying Apache version. It should be noted that the underlying software could be back-ported and a newer version could be in place and should be investigated further. However, since the version reported is publicly known to contain vulnerabilities, a malicious attacker may be convinced to investigate further more malicious vulnerabilities. Potentially Vulnerable version of Apache in place: https://iandunn.name/wordpress/wp-admin.php https://iandunn.name/wordpress/wp-config.php Additionally, the following default WordPress file was identified revealing the version of WordPress in place: and should be removed: https://iandunn.name/wordpress/readme.html Thanks

Report Details

Additional information and metadata

State

Closed

Substate

Informative

Submitted

Weakness

Information Disclosure