Mars · Report #2641211
phpinfo() exposed on ██████████
Validstatus
mediumseverity
51upvotes
21 Nov 2024disclosed
Summary
A phpinfo() page is exposed at the URL ███████. This configuration issue allows sensitive system information to be publicly accessed. The exposed page contains detailed information about the PHP environment, server configuration, and system settings that should not be accessible to unauthorized users
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.