Enhancement: exposures/configs/phpinfo-files.yaml by md

patch-1
MostInterestingBotInTheWorld 2023-02-22 15:57:45 -05:00
parent dc3e55816c
commit b5b5b50701
1 changed files with 4 additions and 2 deletions

View File

@ -1,10 +1,10 @@
id: phpinfo-files
info:
name: phpinfo Disclosure
name: PHPinfo Page - Detect
author: pdteam,daffainfo,meme-lord,dhiyaneshDK,wabafet
description: |
A "PHP Info" page was found. The output of the phpinfo() command can reveal detailed PHP environment information.
PHPinfo page was detected. The output of the phpinfo() command can reveal sensitive and detailed PHP environment information.
remediation: |
Remove PHP Info pages from publicly accessible sites, or restrict access to authorized users only.
severity: low
@ -55,3 +55,5 @@ requests:
group: 1
regex:
- '>PHP Version <\/td><td class="v">([0-9.]+)'
# Enhanced by md on 2023/02/22