Looking for the vulnerability index of Invicti's legacy products?
PHP errors enabled - Vulnerability Database

PHP errors enabled

Description

Application error or warning messages may expose sensitive information about an application's internal workings to an attacker.

Invicti IAST found that the PHP display_errors directive is enabled.

Remediation

Adjust <code>php.ini</code> or <code>.htaccess</code> (<code>mod_php</code> with Apache HTTP Server) to disable <code>display_errors</code> (refer to 'Detailed information' section).

Related Vulnerabilities