Path Disclosure Vulnerability http://crm.******.com
Low
U
Unikrn
Submitted None
Actions:
Reported by
b4a1d31dd4acbccc47b8072
Vulnerability Details
Technical details and impact analysis
Hello, there is a path discovery on the server.
https://crm.unikrn.com/plugins/MauticZapierBundle/MauticZapierBundle.php
https://crm.unikrn.com/plugins/MauticCloudStorageBundle/MauticCloudStorageBundle.php
and other scripts at https://crm.unikrn.com/plugins/*/*.php .
As an option to eliminate the error, you can write the following code in the file .htaccess :
error_reporting(0);
## Impact
that will help the attacker to gather more information about your server. Such as local folder location by script on "crm"
Report Details
Additional information and metadata
State
Closed
Substate
Resolved