The remote web server uses the default Apache index page. This page may contain some sensitive data like the server root and installation paths.

This could potentially leak useful information about the server installation to a remote, unauthenticated attacker.

The installation of Apache Tomcat detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

It is possible to send debug statements to the remote ASP scripts via the http DEBUG method. A remote, unauthenticated attacker may leverage this to alter the runtime of the remote scripts.

The ASP.NET web application running in the root directory of the remote web server has application tracing enabled. This allows an unauthenticated, remote attacker to view the last 50 web requests made to the server, including sensitive information like Session ID values and the physical path to the requested file.

The scanner has detected Nginx default index pages on the remote web server.

This could potentially leak useful information about the server installation to a remote, unauthenticated attacker.

The installation of Apache detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

The installation of PHP detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

The installation of Microsoft Internet Information Services (IIS) detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

The installation of Joomla! detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

The installation of Drupal detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

The installation of WordPress detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

The Joomla! application running on the remote web server is affected by a remote code execution vulnerability due to improper sanitization of the User-Agent header field when saving session values. An unauthenticated, remote attacker can exploit this, via a serialized PHP object, to execute arbitrary PHP code.

The version of Drupal running on the remote web server is affected by a remote code execution vulnerability in the Coder module, specifically in file coder_upgrade.run.php, due to improper validation of user-supplied input to the unserialize() function. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary PHP code.

The remote web server is running a version of Drupal that is affected by a SQL injection vulnerability due to a flaw in the Drupal database abstraction API, which allows a remote attacker to use specially crafted requests that can result in arbitrary SQL execution. This may lead to privilege escalation, arbitrary PHP execution, or remote code execution.

The version of Drupal running on the remote web server is affected by a remote code execution vulnerability in the bundled RESTful Web services (RESTWS) module due to a flaw in how default page callbacks for Drupal entities are altered when handling specially crafted requests. An unauthenticated, remote attacker can exploit this, via a crafted request, to execute arbitrary PHP code.

The Joomla! installation running on the remote web server is affected by a SQL injection vulnerability in the fields.php script due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the disclosure or modification of arbitrary data.

The WordPress application running on the remote web server is version 4.7.x prior to 4.7.2. It is, therefore, affected by a privilege escalation vulnerability in the REST API due to a failure to properly sanitize user- supplied input to the 'id' parameter when editing or deleting blog posts. An unauthenticated, remote attacker can exploit this issue to run arbitrary PHP code, inject content into blog posts, modify blog post attributes, or delete blog posts.

The WordPress REST API is enabled by default as of version 4.7.0. This vulnerability was silently patched in WordPress version 4.7.2.

Note that WordPress is reportedly affected by additional vulnerabilities; however, the scanner has not tested for these.

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised.

Note: This has been detected using an active check and should be remediated immediately.

A public facing WordPress XML-RPC interface has been detected.

An attacker may be able to launch attacks against the web server Via XML-RPC including:
 - Login into WordPress backend Administrative interface
 - Brute force user credentials
 - Use pingbacks (for scanning or fingerprinting for example)

ID	Name	Severity
112351	Apache Default Index Page	medium
98232	Apache Tomcat Unsupported Version	critical
112353	ASP.NET DEBUG Method Enabled	medium
112352	Microsoft ASP.NET Application Tracing trace.axd Information Disclosure	medium
112350	Nginx Default Index Page	medium
98231	Apache Unsupported Version	critical
98230	PHP Unsupported Version	critical
113029	Microsoft IIS Unsupported Version	critical
98229	Joomla! Unsupported Version	critical
98228	Drupal Unsupported Version	critical
98227	WordPress Unsupported Version	critical
98222	Joomla! User-Agent Object Injection RCE	critical
98221	Drupal Coder Module Deserialization RCE	critical
98220	Drupal Database Abstraction API SQLi	critical
98219	Drupal RESTWS Module Page Callback RCE	critical
98218	Joomla! 3.7.0 < 3.7.1 fields.php getListQuery() Method SQLi	critical
98217	WordPress 4.7.x < 4.7.2 REST API 'id' Parameter Privilege Escalation	high
98216	Drupal < 7.58 / 8.x < 8.3.9 / 8.4.x < 8.4.6 / 8.5.x < 8.5.1 Remote Code Execution	critical
98215	WordPress XML-RPC Interface Detected	medium

Detections

Analytics

Component Vulnerability Family for Web App Scanning

medium

critical

medium

medium

medium

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

critical

medium