Mobile Legends: Bang Bang

 Forgot password?
 Register now.
View: 604|Reply: 2
Collapse the left

[Other Bug Report] PHP info page disclosure

 Close [Copy link]
Post time 2019-12-29 07:35 PM | Show all posts |Read mode

Sign up now, Make more friends, Enjoy with more features, Let you easily Fun Community.

You have to Login for download or view attachment(s). No Account? Register

x
Description:
phpinfo() is a debug functionality that prints out detailed information on both the system and the PHP configuration.
Step to reproduce:
  • Go to http://assistant.mobilelegends.com/phpinfo.php
An attacker can obtain information such as:
•Exact PHP version.
•Exact OS and its version.
•Details of the PHP configuration.
•Internal IP addresses.
•Server environment variables.
•Loaded PHP extensions and their configurations.
This information can help an attacker gain more information on the system. After gaining detailed information, the attacker can research known vulnerabilities for that system under review. The attacker can also use this information during the exploitation of other vulnerabilities.
Regards.
xkorem1337




Post time 2019-12-30 08:41 PM | Show all posts
Thanks for your feedback. We will let the the official know about this.
 Author| Post time 2019-12-30 09:56 PM | Show all posts
Link has now fixed ! I re-check and i see this information was not leakable anymore..
You have to log in before you can reply Login | Register now.

Points Rules

Mobile Phone Version|Dark Room|Mobile Legends: Bang Bang Official Forum

2021-12-6 10:20 PM GMT+8

Powered by Discuz! X3.4

© 2001-2013 Comsenz Inc.

Quick Reply To Top Return to the list