U.S. Dept Of Defense · Report #804809
phpinfo() disclosure info
Validstatus
mediumseverity
15upvotes
18 Oct 2021disclosed
How it was found
hi security team i found subdoamins avalibale file phpinfo()
PoC:-
https://█████████/phpinfo.php
Impact
An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version. •Details of the PHP configuration. •Internal IP addresses. •Server environment variables. •Loaded PHP extensions and their configurations.