Description
The HTML comments of this page contain configuration information for Microsoft FrontPage Server Extensions. The configuration information includes the FrontPage version and may help an attacker to learn more about his target.
Remediation
It's recommended to restrict access to this file.
References
OWASP - Information Disclosure
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
[MC-FPSEWM]: FrontPage Server Extensions: Website Management Protocol
Related Vulnerabilities
WordPress database credentials disclosure
WordPress Plugin YaySMTP-Simple WP SMTP Mail Information Disclosure (2.2)
Drupal 7 arbitrary PHP code execution and information disclosure
WordPress Plugin WooCommerce Email Test Information Disclosure (1.5)
WordPress Plugin Advanced Contact form 7 DB Information Disclosure (1.1.0)