- Apache Axis2 is installed on this application server. By accessing a specific URL (/services/listServices) it's possible to list all the available web services deployed in this server.
- If you don't want these services to be publicly available you need to restrict access to the /services/listServices URL.
- WordPress Plugin Download Monitor Information Disclosure (1.6.3)
- WordPress Plugin Subscribe to Comments Unsubscribe Challenge Information Disclosure (2.0.2)
- WordPress Plugin Contact Form Email Information Disclosure (1.2.66)
- Drupal Core 7.x Information Disclosure (7.0 - 7.26)
- WordPress Plugin Advanced XML Reader XML External Entity Information Disclosure (0.3.4)