phpMoAdmin Detected
Severity: Information
Summary #
Invicti identified that phpMoAdmin is publicly accessible on the target server. phpMoAdmin is an application written in the PHP language that provides a web-based interface for the administration of MongoDB databases.
Impact #
An attacker can access, modify or delete all MongoDB databases.
Remediation #
Configure your web server to prevent public access to the page by implementing access control mechanisms.
Classifications #
CWE-205; ISO27001-A.14.2.5; WASC-13; OWASP PC-C6; OWASP 2017-A6
Netsparker Security Insights #
- Netsparker Will Be Sponsoring and Exhibiting at the PHPKonf 2019 in Istanbul
- Sven Morgenroth Talks About PHP Object Injection Vulnerabilities on Paul's Security Weekly Podcast
- End of Support for PHP 5 and PHP 7.0
- The Powerful Resource of PHP Stream Wrappers
- Sven Morgenroth Talks About PHP Type Juggling on Paul's Security Weekly Podcast
Helpful Use Cases #
Vulnerability Index
You can search and find all vulnerabilities
Select Category
OR
Search Vulnerability
Tags
Related Vulnerabilities
