PHP Version Disclosure

Description

Exposing the PHP version used by the server facilitates attackers in identifying vulnerabilities more easily. This information exposes the server to potential risks.

Recommendation

To mitigate this issue, configure the web server to stop revealing the PHP version.

References

OWASP: Web Server Security
CWE-16
CWE-200
CAPEC-118
OWASP 2021-A1
OWASP 2021-A5

Could your website be exposed too?

SmartScanner can check your website for PHP Version Disclosure and gives you actionable findings to investigate.

Start a free scan

Related Issues

ASP.NET Version Disclosure - Vulnerability
Apache Version Disclosure - Vulnerability
Server Version Disclosure - Vulnerability
Nginx Version Disclosure - Vulnerability

Exploiting Server Version Disclosure

Complete guide to HTTP Headers for securing websites (Cheat Sheet)

These 7 PHP mistakes leave your website open to the hackers

See something that needs correcting? Let us knowUpdated May 13, 2024