Description
This server is configured to display PHP error messages. One or more fully qualified path names were found on this page. From this information the attacker may learn the file system structure from the web server. This information can be used to conduct further attacks.
Remediation
Prevent this information from being displayed to the user. This can be done in PHP's php.ini file or in Apache's httpd.conf file:
php.ini:
display_errors = 'off'apache2.conf:
php_flag display_errors off
References
Related Vulnerabilities
Stack Trace Disclosure (Ruby-Sinatra Framework)
WordPress Plugin Fast Velocity Minify Information Disclosure (2.7.6)
WordPress Plugin Backup Migration Arbitrary File Download (1.3.6)
WordPress Plugin U Extended Comment 'fileurl' Parameter Arbitrary File Download (1.0.1)
WordPress Plugin All-in-One WP Migration Information Disclosure (7.0)