PHP expose_php Information Disclosure

[Stichoza]

The PHP install on the remote server is configured in a way that allows disclosure of potentially sensitive information to an attacker through a special URL. Such a URL triggers an Easter egg built into PHP itself.

Example of exposed PHP info

https://unihack.ge:8080/index.php/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000

Solution

In the PHP configuration file, php.ini, set the value for 'expose_php' to 'Off' to disable this behavior. Restart the web server daemon to put this change into effect.