Vuln php show source
[edit] PHP Function show_source() is enabled
The PHP function show_source() allows allows a user, application or attacker to show the source code for a PHP application. This may make it possible for an attacker to learn details about the application and its vulnerability, to access parts of the application they should not have access to, to discover sensitive information such as stored password or to other gain access to information inside the application.
[edit] Next Steps
If this risk is unacceptable for your system, then you will want to disable this capability in PHP.
Step 1: Log into the ASL GUI, click on Configuration and select the ASL configuration menu option. This will open the ASL configuration screen.
Step 2: Scroll down to PHP_CHECKS and make sure this is set to "yes". By default ASL will only warn about PHP vulnerabilities. If you set this to yes, it will also fix these vulnerabilities. If this is set to "no" the next step will not work, so set this to "yes".
Step 3: Scroll down to ALLOW_show_source d and set this to "no".
Step 4: Click the "update" button.
This will resolve this vulnerability.
