Fantastico fileslist

Description

Fantastico is a commercial script library that automates the installation of web applications to a website. Fantastico scripts are executed from the administration area of a website control panel such as cPanel. Fantastico's web site claims that they are installed on ten thousand servers, with a million users worldwide. Fantastico creates a file named fantastico_fileslist.txt that is publicly available. This file contains a list of all the files from the current directory. The contents of this file may expose sensitive information to an attacker.

Remediation

Restrict access to this file.

Severity
Classification
Tags
  • Information Disclosure  Known Vulnerabilities  Test Files