The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652274c0359f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/moodle/moodle.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "MOODLE_39"] remote = origin merge = refs/heads/MOODLE_39_STABLE [branch "MOODLE_401_STABLE"] remote = origin merge = refs/heads/MOODLE_401_STABLE
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652293b61db6
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/moodle/moodle.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "MOODLE_39"] remote = origin merge = refs/heads/MOODLE_39_STABLE
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652274c0359f
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/moodle/moodle.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "MOODLE_39"] remote = origin merge = refs/heads/MOODLE_39_STABLE [branch "MOODLE_401_STABLE"] remote = origin merge = refs/heads/MOODLE_401_STABLE
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652293b61db6
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/moodle/moodle.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "MOODLE_39"] remote = origin merge = refs/heads/MOODLE_39_STABLE
PHPinfo page has been found in this directory. The PHPinfo page outputs a large amount of information about the current state of PHP.
This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers, and the PHP License.
Environment variables may contain credentials.
Fingerprint: 2c44e2a6278fb0134173d6fa8a4be714b772c9baaeb804978432088d7735fc8a
Found PHP info page: $_SERVER['USER'] = apache $_SERVER['HOME'] = /usr/share/httpd $_SERVER['SCRIPT_NAME'] = /info.php $_SERVER['REQUEST_URI'] = /info.php $_SERVER['QUERY_STRING'] = no value $_SERVER['REQUEST_METHOD'] = GET $_SERVER['SERVER_PROTOCOL'] = HTTP/1.1 $_SERVER['GATEWAY_INTERFACE'] = CGI/1.1 $_SERVER['REMOTE_PORT'] = 35440 $_SERVER['SCRIPT_FILENAME'] = /home/coventrycollege/public_html/server/moodle/info.php $_SERVER['SERVER_ADMIN'] = root@localhost $_SERVER['CONTEXT_DOCUMENT_ROOT'] = /home/coventrycollege/public_html/server/moodle $_SERVER['CONTEXT_PREFIX'] = no value $_SERVER['REQUEST_SCHEME'] = http $_SERVER['DOCUMENT_ROOT'] = /home/coventrycollege/public_html/server/moodle $_SERVER['REMOTE_ADDR'] = 161.35.86.181 $_SERVER['SERVER_PORT'] = 80 $_SERVER['SERVER_ADDR'] = 194.83.3.70 $_SERVER['SERVER_NAME'] = 194.83.3.70 $_SERVER['SERVER_SOFTWARE'] = Apache/2.4.37 (centos) OpenSSL/1.1.1 mod_fcgid/2.3.9 $_SERVER['SERVER_SIGNATURE'] = no value $_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin $_SERVER['HTTP_CONNECTION'] = close $_SERVER['HTTP_ACCEPT_ENCODING'] = gzip $_SERVER['HTTP_USER_AGENT'] = Go-http-client/1.1 $_SERVER['HTTP_HOST'] = 194.83.3.70 $_SERVER['proxy-nokeepalive'] = 1 $_SERVER['UNIQUE_ID'] = YPfZpWvpofEtGFReUnSQPwAAAIE $_SERVER['FCGI_ROLE'] = RESPONDER $_SERVER['PHP_SELF'] = /info.php $_SERVER['REQUEST_TIME_FLOAT'] = 1626855845.4832 $_SERVER['REQUEST_TIME'] = 1626855845
Fingerprint: 2c44e2a6278fb0134173d6fa8a4be714b772c9baaeb804978432088d36212dd2
Found PHP info page: $_SERVER['USER'] = apache $_SERVER['HOME'] = /usr/share/httpd $_SERVER['SCRIPT_NAME'] = /info.php $_SERVER['REQUEST_URI'] = /info.php $_SERVER['QUERY_STRING'] = no value $_SERVER['REQUEST_METHOD'] = GET $_SERVER['SERVER_PROTOCOL'] = HTTP/1.1 $_SERVER['GATEWAY_INTERFACE'] = CGI/1.1 $_SERVER['REMOTE_PORT'] = 47076 $_SERVER['SCRIPT_FILENAME'] = /home/coventrycollege/public_html/server/moodle/info.php $_SERVER['SERVER_ADMIN'] = root@localhost $_SERVER['CONTEXT_DOCUMENT_ROOT'] = /home/coventrycollege/public_html/server/moodle $_SERVER['CONTEXT_PREFIX'] = no value $_SERVER['REQUEST_SCHEME'] = http $_SERVER['DOCUMENT_ROOT'] = /home/coventrycollege/public_html/server/moodle $_SERVER['REMOTE_ADDR'] = 161.35.86.181 $_SERVER['SERVER_PORT'] = 80 $_SERVER['SERVER_ADDR'] = 194.83.3.70 $_SERVER['SERVER_NAME'] = 194.83.3.70 $_SERVER['SERVER_SOFTWARE'] = Apache/2.4.37 (centos) OpenSSL/1.1.1 mod_fcgid/2.3.9 $_SERVER['SERVER_SIGNATURE'] = no value $_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin $_SERVER['HTTP_CONNECTION'] = close $_SERVER['HTTP_ACCEPT_ENCODING'] = gzip $_SERVER['HTTP_USER_AGENT'] = Go-http-client/1.1 $_SERVER['HTTP_HOST'] = 194.83.3.70 $_SERVER['proxy-nokeepalive'] = 1 $_SERVER['UNIQUE_ID'] = YPF9Xx7mmI55xZdpTBag5QAAAY4 $_SERVER['FCGI_ROLE'] = RESPONDER $_SERVER['PHP_SELF'] = /info.php $_SERVER['REQUEST_TIME_FLOAT'] = 1626439007.3247 $_SERVER['REQUEST_TIME'] = 1626439007
Fingerprint: 2c44e2a6278fb0134173d6fa8a4be714b772c9baaeb804978432088d42fd6501
Found PHP info page: $_SERVER['USER'] = apache $_SERVER['HOME'] = /usr/share/httpd $_SERVER['SCRIPT_NAME'] = /info.php $_SERVER['REQUEST_URI'] = /info.php $_SERVER['QUERY_STRING'] = no value $_SERVER['REQUEST_METHOD'] = GET $_SERVER['SERVER_PROTOCOL'] = HTTP/1.1 $_SERVER['GATEWAY_INTERFACE'] = CGI/1.1 $_SERVER['REMOTE_PORT'] = 43100 $_SERVER['SCRIPT_FILENAME'] = /home/coventrycollege/public_html/server/moodle/info.php $_SERVER['SERVER_ADMIN'] = root@localhost $_SERVER['CONTEXT_DOCUMENT_ROOT'] = /home/coventrycollege/public_html/server/moodle $_SERVER['CONTEXT_PREFIX'] = no value $_SERVER['REQUEST_SCHEME'] = http $_SERVER['DOCUMENT_ROOT'] = /home/coventrycollege/public_html/server/moodle $_SERVER['REMOTE_ADDR'] = 167.99.133.28 $_SERVER['SERVER_PORT'] = 80 $_SERVER['SERVER_ADDR'] = 194.83.3.70 $_SERVER['SERVER_NAME'] = 194.83.3.70 $_SERVER['SERVER_SOFTWARE'] = Apache/2.4.37 (centos) OpenSSL/1.1.1 mod_fcgid/2.3.9 $_SERVER['SERVER_SIGNATURE'] = no value $_SERVER['PATH'] = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin $_SERVER['HTTP_ACCEPT_ENCODING'] = gzip $_SERVER['HTTP_USER_AGENT'] = Go-http-client/1.1 $_SERVER['HTTP_HOST'] = 194.83.3.70 $_SERVER['proxy-nokeepalive'] = 1 $_SERVER['UNIQUE_ID'] = YN2spP1f88H0f56ziGCgAwAAAII $_SERVER['FCGI_ROLE'] = RESPONDER $_SERVER['PHP_SELF'] = /info.php $_SERVER['REQUEST_TIME_FLOAT'] = 1625140388.7657 $_SERVER['REQUEST_TIME'] = 1625140388