Loading HuntDB...

PHP info page disclosure in https://41.242.90.8/

Medium
M
MTN Group
Submitted None
Reported by 0xmekky

Vulnerability Details

Technical details and impact analysis

## Summary: [phpinfo() is a debug functionality that prints out detailed information on both the system and the PHP configuration.] ## Steps To Reproduce: Step to reproduce: 1. [Go here: https://41.242.90.8/info.php] An attacker can obtain information such as: Exact PHP version. Exact OS and its version. Details of the PHP configuration. Internal IP addresses. Server environment variables. Loaded PHP extensions and their configurations and etc. ## Supporting Material/References: *https://www.acunetix.com/vulnerabilities/web/phpinfo-page/ https://www.beyondsecurity.com/scan-pentest-network-vulnerabilities-php-expose-php-information-disclosure ## Impact This information can help an attacker gain more information on the system. After gaining detailed information, the attacker can research known vulnerabilities for that system under review. The attacker can also use this information during the exploitation of other vulnerabilities.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted