Description

The web server is sending the X-Powered-By: response headers, revealing the PHP version.

Remediation

Configure your web server to prevent information leakage from its HTTP response.

References

PHP Documentation: header_remove()

PHP Documentation: php.ini directive expose_php

Related Vulnerabilities

WordPress Plugin Stop User Enumeration User Enumeration (1.3.8)

WordPress Plugin User Meta Manager Information Disclosure (3.4.7)

WordPress Plugin Memphis Documents Library Arbitrary File Download (3.1.5)

Unrestricted access to NGINX+ API interface (read only)

Multiple vulnerabilities in Ioncube loader-wizard.php

Severity

Low

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Tags

Information Disclosure