Description

The web server is sending the X-Powered-By: response headers, revealing the PHP version.

Remediation

Configure your web server to prevent information leakage from its HTTP response.

References

PHP Documentation: header_remove()

PHP Documentation: php.ini directive expose_php

Related Vulnerabilities

WordPress Plugin File Manager Information Disclosure (6.4)

WordPress database credentials disclosure

CodeIgniter development mode enabled

Cloud metadata publicly exposed

Node.js Running in Development Mode

Severity

Low

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Tags

Information Disclosure