Mars · Report #2666151
phpinfo() exposed on ██████████
Validstatus
36upvotes
21 Nov 2024disclosed
Summary
A phpinfo() page is exposed on the Royal Canin email automation API server. This page reveals sensitive system configuration details and technical information about the PHP environment. The exposure of such information could potentially aid attackers in reconnaissance efforts and vulnerability identification.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.