View Issue Details

Jump to Notes
IDProjectCategoryView StatusDate SubmittedLast Update
0002071XdebugCode Coveragepublic2022-03-07 00:232022-03-07 15:51
ReporterHako Assigned To 
PrioritylowSeverityminorReproducibilityalways
Status resolvedResolutionno change required 
Summary0002071: A php info file is available for all users
Description

Hi I found that a page of phpinfo that contain a sensitive informations about the website infrastructure. So just go to https://xdebug.org/archives/xdebug-general/att-0782/phpinfo.htm to reproduce it

Steps To Reproduce

Go to https://xdebug.org/archives/xdebug-general/att-0782/phpinfo.htm and you will see the configuration file

Additional Information

An attacker can obtain information such as:
Exact PHP version.
Exact OS and its version.
Details of the PHP configuration.
Internal IP addresses.
Server environment variables.
Loaded PHP extensions and their configurations and etc.

TagsNo tags attached.
Operating System
PHP Version8.0.10-8.0.19

Activities

derick

2022-03-07 15:51

administrator   ~0006232

There is nothing sensitive in that file.