Starbucks · Report #367050

PHPinfo page

Validstatus

lowseverity

39upvotes

12 Jun 2019disclosed

How it was found

GET /test.php HTTP/1.1 Host: 52.90.193.152 Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21 Accept: /

Impact

This file may expose sensitive information that may help an malicious user to prepare more advanced attacks.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original