PHP Version Disclosure

Description

Exposing the PHP version used by the server facilitates attackers in identifying vulnerabilities more easily. This information exposes the server to potential risks.

Recommendation

To mitigate this issue, configure the web server to stop revealing the PHP version.

References

• CWE-16
• CWE-200
• OWASP 2021-A5
• OWASP: Web Server Security

Related Issues

• ASP.NET Version Disclosure - Vulnerability
• Apache Version Disclosure - Vulnerability
• Nginx Version Disclosure - Vulnerability
• Server Version Disclosure - Vulnerability

Tags:

HTTP Headers

Information Disclosure

Application Misconfiguration

PHP

Web Server

WASC-13

WASC-15

CWE-200

CWE-16

OWASP 2021-A5

OWASP 2017-A6

OWASP 2013-A5

CAPEC-118