Enumerate PHP Composer Packages (Windows)

info Nessus Plugin ID 191140

Synopsis

Nessus was able to enumerate one or more PHP Composer packages on the remote Windows host.

Description

Nessus was able to enumerate one or more PHP Composer packages on the remote Windows host.

Packages are discovered by locating composer.lock files in user directories and common web server locations.

Note that 'Perform thorough tests' enables system-wide search for composer.lock files.

See Also

https://getcomposer.org

Plugin Details

Severity: Info

ID: 191140

File Name: php_composer_enum_win.nbin

Version: 1.64

Type: Local

Agent: windows

Family: Windows

Published: 2/29/2024

Updated: 10/12/2026

Configuration: Enable thorough checks (optional)

Asset Inventory: true

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated