LeakIX - Host 4s-services.com

Domain 4s-services.com

France

GANDI SAS

Found php information file

PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.

This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.

Environment variables may contain credentials.

https://www.acunetix.com/vulnerabilities/web/phpinfo-page/

IP: 92.243.13.59
Domain: 4s-services.com
Port: 443
URL: https://4s-services.com/info.php

First seen 2021-09-19 15:04
Last seen 2021-10-10 07:25
Open for 20 days

Fingerprint: 2c44e2a6278fb0134173d6fadf693332eab5dd0f6580f72e213b4b3e7ec308ed

Found PHP info page:
_SERVER["UNIQUE_ID"] = YWKTJVzzDTsAAApAeDsAAAAB
_SERVER["HTTPS"] = on
_SERVER["HTTP_HOST"] = 4s-services.com
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = /usr/local/bin:/usr/bin:/bin
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["SERVER_SOFTWARE"] = Apache
_SERVER["SERVER_NAME"] = 4s-services.com
_SERVER["SERVER_ADDR"] = 92.243.13.59
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["DOCUMENT_ROOT"] = /srv/datadisk02/datas/www/4s-services_com/web
_SERVER["SERVER_ADMIN"] = support@haoto.fr
_SERVER["SCRIPT_FILENAME"] = /srv/datadisk02/datas/www/4s-services_com/web/info.php
_SERVER["REMOTE_PORT"] = 19088
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME"] = 1633850149

Found on 2021-10-10 07:25

Fingerprint: 2c44e2a6278fb0134173d6fab417c647c98c46c05b491d755c9944b5b9116a1d

Found PHP info page:
_SERVER["UNIQUE_ID"] = YU-AFVzzDTsAAAaIDckAAAAI
_SERVER["HTTPS"] = on
_SERVER["HTTP_HOST"] = 4s-services.com
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = /usr/local/bin:/usr/bin:/bin
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["SERVER_SOFTWARE"] = Apache
_SERVER["SERVER_NAME"] = 4s-services.com
_SERVER["SERVER_ADDR"] = 92.243.13.59
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["DOCUMENT_ROOT"] = /srv/datadisk02/datas/www/4s-services_com/web
_SERVER["SERVER_ADMIN"] = support@haoto.fr
_SERVER["SCRIPT_FILENAME"] = /srv/datadisk02/datas/www/4s-services_com/web/info.php
_SERVER["REMOTE_PORT"] = 36556
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME"] = 1632616469

Found on 2021-09-26 00:43

Fingerprint: 2c44e2a6278fb0134173d6fa3cb8e9481d7cfad5936e953cd0d49114b65a3488

Found PHP info page:
_SERVER["UNIQUE_ID"] = YU-AFVzzDTsAAAt5R44AAAAA
_SERVER["HTTPS"] = on
_SERVER["HTTP_HOST"] = 4s-services.com
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = /usr/local/bin:/usr/bin:/bin
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["SERVER_SOFTWARE"] = Apache
_SERVER["SERVER_NAME"] = 4s-services.com
_SERVER["SERVER_ADDR"] = 92.243.13.59
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["DOCUMENT_ROOT"] = /srv/datadisk02/datas/www/4s-services_com/web
_SERVER["SERVER_ADMIN"] = support@haoto.fr
_SERVER["SCRIPT_FILENAME"] = /srv/datadisk02/datas/www/4s-services_com/web/info.php
_SERVER["REMOTE_PORT"] = 36048
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME"] = 1632616469

Found on 2021-09-26 00:43

Fingerprint: 2c44e2a6278fb0134173d6fa60d793eed22e42331f94b29accbd35eaf6e04df6

Found PHP info page:
_SERVER["UNIQUE_ID"] = YU-AFVzzDTsAAHNuCvkAAAAL
_SERVER["HTTPS"] = on
_SERVER["HTTP_HOST"] = 4s-services.com
_SERVER["HTTP_USER_AGENT"] = l9explore/1.3.0
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = /usr/local/bin:/usr/bin:/bin
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["SERVER_SOFTWARE"] = Apache
_SERVER["SERVER_NAME"] = 4s-services.com
_SERVER["SERVER_ADDR"] = 92.243.13.59
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["DOCUMENT_ROOT"] = /srv/datadisk02/datas/www/4s-services_com/web
_SERVER["SERVER_ADMIN"] = support@haoto.fr
_SERVER["SCRIPT_FILENAME"] = /srv/datadisk02/datas/www/4s-services_com/web/info.php
_SERVER["REMOTE_PORT"] = 35838
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME"] = 1632616469

Found on 2021-09-26 00:43

Fingerprint: 2c44e2a6278fb0134173d6fa9968774f90506688bff2744d79563156a69c51dc

Found PHP info page:
_SERVER["UNIQUE_ID"] = YUdPeVzzDTsAAGt5ovcAAAAC
_SERVER["HTTPS"] = on
_SERVER["HTTP_HOST"] = 4s-services.com
_SERVER["HTTP_USER_AGENT"] = Go-http-client/1.1
_SERVER["HTTP_ACCEPT_ENCODING"] = gzip
_SERVER["HTTP_CONNECTION"] = close
_SERVER["PATH"] = /usr/local/bin:/usr/bin:/bin
_SERVER["SERVER_SIGNATURE"] = no value
_SERVER["SERVER_SOFTWARE"] = Apache
_SERVER["SERVER_NAME"] = 4s-services.com
_SERVER["SERVER_ADDR"] = 92.243.13.59
_SERVER["SERVER_PORT"] = 443
_SERVER["REMOTE_ADDR"] = 167.71.13.196
_SERVER["DOCUMENT_ROOT"] = /srv/datadisk02/datas/www/4s-services_com/web
_SERVER["SERVER_ADMIN"] = support@haoto.fr
_SERVER["SCRIPT_FILENAME"] = /srv/datadisk02/datas/www/4s-services_com/web/info.php
_SERVER["REMOTE_PORT"] = 52154
_SERVER["GATEWAY_INTERFACE"] = CGI/1.1
_SERVER["SERVER_PROTOCOL"] = HTTP/1.1
_SERVER["REQUEST_METHOD"] = GET
_SERVER["QUERY_STRING"] = no value
_SERVER["REQUEST_URI"] = /info.php
_SERVER["SCRIPT_NAME"] = /info.php
_SERVER["PHP_SELF"] = /info.php
_SERVER["REQUEST_TIME"] = 1632063353

Found on 2021-09-19 15:04

Create report

Symfony error leaking informations

The application has Symfony verbose mode enabled.

It enables an attacker to access the following sensitive content :

System configuration and/or credentials

IP: 92.243.13.59
Domain: 4s-services.com
Port: 443
URL: https://4s-services.com/frontend_dev.php/$

First seen 2021-09-26 00:43
Last seen 2021-10-10 07:25
Open for 14 days

Fingerprint: 05ab011344cbe668a46b2141a7599f8ab37af45b668017d9b92db258c0f28dba

app_default_prefix: 'php /srv/datadisk02/datas/www/4s-services_com/symfony'
app_sfCronManagerPlugin_load_limit_ignore: -1
app_sfCronManagerPlugin_timestamp_max: 2147483647
app_sfErrorNotifier_emailFormat: html
app_sfErrorNotifier_emailFrom: postmaster@4s-services.com
app_sfErrorNotifier_emailTo: postmaster@4s-services.com
app_sfErrorNotifier_enabled: true
app_sfErrorNotifier_mailerMethod: null
app_sfErrorNotifier_report404: true
app_sfErrorNotifier_reportPHPErrors: true
app_sfErrorNotifier_reportPHPWarnings: true
app_type_url_serveur: 1
app_url_serveur: 'https://4s-services.com'
sf_admin_module_web_dir: /sfDoctrinePlugin
sf_admin_web_dir: /sf/sf_admin
sf_app: frontend
sf_app_base_cache_dir: /srv/datadisk02/datas/www/4s-services_com/cache/frontend
sf_app_cache_dir: /srv/datadisk02/datas/www/4s-services_com/cache/frontend/dev
sf_app_config_dir: /srv/datadisk02/datas/www/4s-services_com/apps/frontend/config
sf_app_dir: /srv/datadisk02/datas/www/4s-services_com/apps/frontend
sf_app_i18n_dir: /srv/datadisk02/datas/www/4s-services_com/apps/frontend/i18n
sf_app_lib_dir: /srv/datadisk02/datas/www/4s-services_com/apps/frontend/lib
sf_app_module_dir: /srv/datadisk02/datas/www/4s-services_com/apps/frontend/modules
sf_app_template_dir: /srv/datadisk02/datas/www/4s-services_com/apps/frontend/templates
sf_apps_dir: /srv/datadisk02/datas/www/4s-services_com/apps
sf_cache: false
sf_cache_dir: /srv/datadisk02/datas/www/4s-services_com/cache
sf_charset: utf-8
sf_check_lock: false
sf_compressed: false
sf_config_cache_dir: /srv/datadisk02/datas/www/4s-services_com/cache/frontend/dev/config
sf_config_dir: /srv/datadisk02/datas/www/4s-services_com/config
sf_csrf_secret: false
sf_data_dir: /srv/datadisk02/datas/www/4s-services_com/data
sf_debug: true
sf_default_culture: fr_FR
sf_enabled_modules:
  - sfCronManager
sf_environment: dev
sf_error_404_action: error404
sf_error_404_module: default
sf_error_reporting: 32767
sf_escaping_method: ESC_SPECIALCHARS
sf_escaping_strategy: true
sf_etag: false
sf_file_link_format: null
sf_i18n: on
sf_i18n_cache_dir: /srv/datadisk02/datas/www/4s-services_com/cache/frontend/dev/i18n
sf_jquery_autocomplete: jquery.autocomplete.min.js
sf_jquery_core: jquery-1.3.2.min.js
sf_jquery_ui: jquery-ui-1.7.2.custom.min.js
sf_jquery_web_dir: /sfJqueryReloadedPlugin
sf_lib_dir: /srv/datadisk02/datas/www/4s-services_com/lib
sf_log_dir: /srv/datadisk02/datas/www/4s-services_com/log
sf_logging_enabled: true
sf_login_action: login
sf_login_module: user
sf_module_cache_dir: /srv/datadisk02/datas/www/4s-services_com/cache/frontend/dev/modules
sf_module_disabled_action: disabled
sf_module_disabled_module: default
sf_no_script_name: false
sf_orm: doctrine
sf_plugins_dir: /srv/datadisk02/datas/www/4s-services_com/plugins
sf_rich_text_fck_js_dir: js/fckeditor
sf_root_dir: /srv/datadisk02/datas/www/4s-services_com
sf_secure_action: secure
sf_secure_module: default
sf_standard_helpers:
  - Partial
  - Cache
sf_symfony_lib_dir: /usr/share/php/symfony
sf_template_cache_dir: /srv/datadisk02/datas/www/4s-services_com/cache/frontend/dev/template
sf_test_cache_dir: /srv/datadisk02/datas/www/4s-services_com/cache/frontend/dev/test
sf_test_dir: /srv/datadisk02/datas/www/4s-services_com/test
sf_upload_dir: /srv/datadisk02/datas/www/4s-services_com/web/uploads
sf_use_database: true
sf_web_debug: true
sf_web_debug_web_dir: /sf/sf_web_debug
sf_web_dir: /srv/datadisk02/datas/www/4s-services_com/web

Found on 2021-09-26 00:43

Create report

Domain summary

4s-services.com 6

1 recorded

IP summary

92.243.13.59 1

1 recorded