HexBrain

Expedia Group Bug Bounty · Report #1762764

Sensitive information for phpinfo.php at https://products.ean.com/

Validstatus
lowseverity
23upvotes
11 Apr 2023disclosed

How it was found

poc: https://products.ean.com/phpinfo.php

Impact

This information can help an attacker gain more information on the system. After gaining detailed information, the attacker can research known vulnerabilities for that system under review. The attacker can also use this information during the exploitation of other vulnerabilities.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original