40032—.htaccess Information Leak

PUBLISHEDsecurity alertMedium

Active

Metadata

Alert ID:: 40032
Risk:: Medium
Type:: Active
CWE:: CWE-94Improper Control of Generation of Code ('Code Injection')

摘要

htaccess files can be used to alter the configuration of the Apache Web Server software to enable/disable additional functionality and features that the Apache Web Server software has to offer.

解决方案

Ensure the .htaccess file is not accessible.

参考

browse all alerts