This host is installed with PHP and is prone to multiple information disclosure vulnerabilities.

Successful exploitation will allow remote attackers to obtain sensitive information. Impact Level: Application

Upgrade to PHP 5.3.22 or 5.4.12 or later, http://www.php.net/downloads.php

Flaws are due to the way SOAP parser process certain SOAP objects (due to allowed expansion of XML external entities during SOAP WSDL files parsing).

PHP version before 5.3.22 and 5.4.x before 5.4.12

Get the installed version of PHP with the help of detect NVT and check the version is vulnerable or not.

• http://git.php.net/?p=php-src.git;a=commit;h=afe98b7829d50806559acac9b530acb8283c3bf4
• http://php.net/ChangeLog-5.php
• http://www.osvdb.org/90922

---

Updated on 2015-03-25