Source Code Disclosure
- CAPEC 118
- CWE 540
- WASC 13
- OWASP 2017-A3
Obtaining the source code of server-side scripts grants the attacker deeper knowledge of the logic behind the web application, how the application handles requests and their parameters, the structure of the database, vulnerabilities in the code and source code comments.
Remediation
Review the cause of the code disclosure and prevent it from happening.
References
Go Back to List
Search Vulnerability
You may also see
- Long Redirect Response
- Error Message
- Stack Trace
- Internal Path
- Not Secure Cookie
- Not Http-Only Cookie
- Sensitive Data in Query String
- Sensitive Data over HTTP
- Server Error
- Source Code Disclosure
- Information Leakage
- Web Backdoor
- Database Connection String
- Autocomplete Enabled
- Undefined Content-Type Header
- Missing X-Frame-Options Header
- Mixed Content
- Insecure iFrame
- XPath Injection
- Basic Authentication over HTTP
- Forbidden Resource
- Multiple Choices Enabled
- Apache MultiViews Enabled