

Netsparker identified a possible source code disclosure (PHP).


Depending on the source code, database connection strings, username, and passwords, the internal workings and business logic of application might be revealed. With such information, an attacker can mount the following types of attacks:
Actions To Take
  1. Confirm exactly what aspects of the source code are actually disclosed; due to the limitations of this type of vulnerability, it might not be possible to confirm this in all instances. Confirm this is not an intended functionality.
Required Skills for Successful Exploitation
CAPEC-118, CWE-540, HIPAA-540, ISO27001-A.9.4.5, WASC-13, OWASP 2013-A5, OWASP 2017-A3 , CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Index

Vulnerability Index

You can search and find all vulnerabilities


Search Vulnerability


php  code 
