CVE-2026-85733

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733 FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733: Exposure of Sensitive Information to an Unauthorized Actor

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

PHPCGIScanner

PHP CGI Scanner Screenshot Overview PHP CGI Scanner is a Python 3 utility designed to help identify systems potentially exposed to CVE-2024-4577. It checks for visible PHP versions, common CGI endpoints, and phpinfo outputs to provide a quick risk assessment. Disclaimer: This tool is for authoriz...

ownCloud graphapi - phpinfo Disclosure Detection (CVE-2023-49103)

ownCloud graphapi exposes vendor test script GetPhpInfo.php, leaking phpinfo output including container environment variables such as OWNCLOUDADMIN CVE-2023-49103 / CVE-2023-49282, CISA KEV. !/usr/bin/env python3 -- coding: utf-8 -- """ownCloud graphapi phpinfo disclosure CVE-2023-49103 /...

ownCloud - graphapi phpinfo Leak (CVE-2023-49103)

Fetches GetPhpInfo.php exposed by ownCloud graphapi and extracts phpinfo / OWNCLOUD environment variables CVE-2023-49103 / CVE-2023-49282. !/usr/bin/env python3 -- coding: utf-8 -- """ownCloud graphapi GetPhpInfo.php credential/config leak CVE-2023-49103.""" import re from kittysploit import from...

MAMP - PHP Info Exposure Detection

Detected MAMP server was exposed phpinfo page, revealing sensitive PHP configuration, server paths, and environment variables. !/usr/bin/env python3 -- coding: utf-8 -- """Detected MAMP server was exposed phpinfo page, revealing sensitive PHP configuration, server paths, and envi.""" from...

Imcat 4.4 - Phpinfo Configuration Detection

Imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI. !/usr/bin/env python3 -- coding: utf-8 -- """Imcat 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Imcat 4....

Woodwing Studio Server - Phpinfo Config Detection

Phpinfo Config file exposed in Woodwing Studio Server. !/usr/bin/env python3 -- coding: utf-8 -- """Phpinfo Config file exposed in Woodwing Studio Server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Woodwing Stud...

Ruijie Phpinfo Configuration - Detect

Ruijie phpinfo configuration was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie phpinfo configuration was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruijie Phpinfo Configuration - Detect...

Laragon - phpinfo Disclosure Detection

Laragon phpinfo file was exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Laragon phpinfo file was exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Laragon - phpinfo Disclosure Detection', 'description':...

GHSA-86VW-X4WW-X467 Craft CMS: RCE via missing cleanseConfig in FieldsController::actionRenderCardPreview

The actionRenderCardPreview method in FieldsController passes the fieldLayoutConfig POST parameter directly to Fields::createLayout without calling Component::cleanseConfig. This allows Yii2 event handler injection via on eventName keys in the config array, leading to arbitrary code execution. Th...

CVE-2026-14249: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The Request a Quote plugin for WordPress is vulnerable to Code Injection in versions up to, and including, 2.5.5 via the emddeletefile AJAX action. This is due to the emddeletefile handler deriving a PHP function name from the attacker-controlled $POST'path' parameter and invoking it dynamically...

CVE-2026-42878

FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure vulnerability in the Installer controller allows any remote attacker to trigger phpinfo on a fresh FacturaScripts deployment by requesting /?phpinfo=TRUE, exposing full PH...

CVE-2026-42878

FacturaScripts prior to v2026 is affected by an unauthenticated information-disclosure vulnerability in the Installer controller: sending a GET with ?phpinfo=TRUE triggers phpinfo() on a fresh deployment, exposing PHP config, environment vars (including possible DB credentials and API keys), file...

CVE-2026-42878

FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure vulnerability in the Installer controller allows any remote attacker to trigger phpinfo on a fresh FacturaScripts deployment by requesting /?phpinfo=TRUE, exposing full PH...

CVE-2026-42878 FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScripts

FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure vulnerability in the Installer controller allows any remote attacker to trigger phpinfo on a fresh FacturaScripts deployment by requesting /?phpinfo=TRUE, exposing full PH...

CVE-2026-42878 FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScripts

FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure vulnerability in the Installer controller allows any remote attacker to trigger phpinfo on a fresh FacturaScripts deployment by requesting /?phpinfo=TRUE, exposing full PH...

CVE-2026-42878 FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScripts

FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure vulnerability in the Installer controller allows any remote attacker to trigger phpinfo on a fresh FacturaScripts deployment by requesting /?phpinfo=TRUE, exposing full PH...

CVE-2026-42878: Exposure of Sensitive Information to an Unauthorized Actor

FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure vulnerability in the Installer controller allows any remote attacker to trigger phpinfo on a fresh FacturaScripts deployment by requesting /?phpinfo=TRUE, exposing full PH...