• Subversion metadata directory (.svn) was found in this folder. An attacker can extract sensitive information by requesting the hidden metadata directory that popular version control tool Subversion creates. The metadata directories are used for development purposes to keep track of development changes to a set of source code before it is committed back to a central repository (and vice-versa). When code is rolled to a live server from a repository, it is supposed to be done as an export rather than as a local working copy, and hence this problem.

• Remove these files from production systems or restrict access to the .svn directory. To deny access to all the .svn folders you need to add the following lines in the appropriate context (either global config, or vhost/directory, or from .htaccess): <code><pre> <Directory ~ "\.svn"> Order allow,deny Deny from all </Directory> </pre></code>

• • Apache Tips & Tricks: Deny access to some folders

• 

• CWE-538

• Information Disclosure Test Files Dev Files

• Zend Framework local file disclosure via XXE injection
• WordPress Plugin Google Doc Embedder Arbitrary File Disclosure (2.4.6)
• Error page web server version disclosure
• ASP.NET diagnostic page
• Password field submitted using GET method