Server software version disclosed
Checks whether Server or X-Powered-By headers reveal exact versions.
Recommended next step if found
Hide version numbers in response headers.
Information disclosure
Public responses may reveal implementation details or sensitive material. The impact depends on what is actually exposed and how it can be used.
Related public checks
The following checks provide related public observations. Their presence does not mean this entire topic has been tested or that the application is secure.
Configuration backup exposed
Requests common backup names of PHP configuration files and checks for credentials.
Recommended next step if found
Delete backup copies of configuration files from the server and change the database password.
phpinfo() page exposed
Requests common phpinfo file names and checks for the phpinfo output.
Recommended next step if found
Delete the phpinfo file from the server.
Keep the scope.
A blocked or unfinished check remains unverified. Review technical recommendations with the person operating the website and test changes before applying them to a live service.
Read the full methodology