Enhancement: exposures/configs/phpinfo-files.yaml by md

patch-1
MostInterestingBotInTheWorld 2023-02-22 15:57:45 -05:00
parent dc3e55816c
commit b5b5b50701
1 changed files with 4 additions and 2 deletions

View File

@ -1,10 +1,10 @@
id: phpinfo-files id: phpinfo-files
info: info:
name: phpinfo Disclosure name: PHPinfo Page - Detect
author: pdteam,daffainfo,meme-lord,dhiyaneshDK,wabafet author: pdteam,daffainfo,meme-lord,dhiyaneshDK,wabafet
description: | description: |
A "PHP Info" page was found. The output of the phpinfo() command can reveal detailed PHP environment information. PHPinfo page was detected. The output of the phpinfo() command can reveal sensitive and detailed PHP environment information.
remediation: | remediation: |
Remove PHP Info pages from publicly accessible sites, or restrict access to authorized users only. Remove PHP Info pages from publicly accessible sites, or restrict access to authorized users only.
severity: low severity: low
@ -55,3 +55,5 @@ requests:
group: 1 group: 1
regex: regex:
- '>PHP Version <\/td><td class="v">([0-9.]+)' - '>PHP Version <\/td><td class="v">([0-9.]+)'
# Enhanced by md on 2023/02/22