Home / Vulnerability Database / PHP : External information leak
PHP

PHP : External information leak

Overview

Possible system configuration information leak. This can help an attacker to plan an attack.

The debug information and error messages depending on the system settings can be written to the log, displayed in the console, or sent to the user. In some cases, an attacker can make a conclusion about the vulnerabilities of the system based on an error message. For example, a database error can indicate the insecurity against attacks such as SQL injection. Information about the version of the operating system, application server and system configuration can also be valuable to the attacker.

In this case, we are talking about the external leak: information about the system is transferred to another machine over the network. External leaks are more dangerous than internal ones.

MEDIUM

DerScanner Severity Score

Do you want to fix PHP : External information leak in your application?

See also

PHP

PHP : Null salt

PHP

PHP : Empty password

PHP

PHP : Empty salt