kemalunal/assessment-project

assessment-project's Issues

Acunetix - .htaccess file readable

Target URL	http://testphp.vulnweb.com
Target Description	vulweb
Severity	Medium

Affects

http://testphp.vulnweb.com/Mod_Rewrite_Shop/

Attack Details

HTTP Request

GET /Mod_Rewrite_Shop/.htaccess HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip,deflate,br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4512.0 Safari/537.36 Host: testphp.vulnweb.com Connection: Keep-alive

Vulnerability Description

This directory contains an .htaccess file that is readable. This may indicate a server misconfiguration. htaccess files are designed to be parsed by web server and should not be directly accessible. These files could contain sensitive information that could help an attacker to conduct further attacks. It's recommended to restrict access to this file.

Impact

Possible sensitive information disclosure.

Remediation

Restrict access to the .htaccess file by adjusting the web server configuration.