/home2/mshostin/mail/.spam/new/1738048961.M95166P3735953.s21.hosterpk.com,S=10300,W=10475
Envelope-to: postmaster@ms-hostingladz.com,
 hello@ms-hostingladz.com,
 sales@ms-hostingladz.com,
 support@ms-hostingladz.com,
 privacy@ms-hostingladz.com,
 webmaster@ms-hostingladz.com,
 help@ms-hostingladz.com,
 contact@ms-hostingladz.com,
 info@ms-hostingladz.com
Delivery-date: Tue, 28 Jan 2025 07:22:41 +0000
MIME-Version: 1.0
From: "BugBountyReport" <security@bugbounty.help>
To: info@ms-hostingladz.com, contact@ms-hostingladz.com,
 help@ms-hostingladz.com, admin@ms-hostingladz.com,
 webmaster@ms-hostingladz.com, privacy@ms-hostingladz.com,
 support@ms-hostingladz.com, sales@ms-hostingladz.com,
 hello@ms-hostingladz.com, postmaster@ms-hostingladz.com
Reply-To: alihunter.adam@gmail.com
Date: 28 Jan 2025 08:18:45 +0100
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Message-Id: <E1tcfry-001GCJ-00@cp.bugbounty.help>
Subject:  ***SPAM***  Urgent : Security Vulnerability Report for ms-hostingladz.com -
 Immediate Attention Required - BBR 11316162

=0D=0A<html>=0D=0A    <p>Hello,</p>=0D=0A=0D=0A    <p>I hope this=
 email finds you well.</p>=0D=0A=0D=0A    <p>My name is Ali Adam,=
 and I am a bug hunter and security researcher. In my spare time,=
 I seek out vulnerabilities on websites to help improve their sec=
urity while also earning a living. Recently, I discovered and rep=
orted a potential issue on your website through Open Bug Bounty.<=
/p>=0D=0A=0D=0A    <p>However, I suspect that you may not have re=
ceived the notification due to some delays on their servers. Ther=
efore, I wanted to reach out directly via email to ensure you hav=
e all the details of the bug report.</p>=0D=0A=0D=0A    <h3>Title=
 of Bug: PHP Info Exposure on ms-hostingladz.com</h3>=0D=0A=0D=0A=
    <h3>Overview:</h3>=0D=0A=0D=0A    <p>During a bug bounty hunt=
ing session, a PHP Info page was discovered on ms-hostingladz.com=
. This page exposes sensitive configuration details about the ser=
ver's PHP environment, which can be leveraged by attackers to per=
form targeted attacks, such as exploiting known vulnerabilities, =
identifying installed extensions, and gathering information about=
 the server's file system.</p>=0D=0A=0D=0A    <h3>Vulnerability D=
etails:</h3>=0D=0A=0D=0A        <p>Affected URL: https://ms-hosti=
ngladz.com/phpinfo.php</p>=0D=0A        <p>Vulnerability Type: In=
formation Disclosure</p>=0D=0A=0D=0A=0D=0A    <h3>Description:</h=
3>=0D=0A    <p>The file PhpInfo on the ms-hostingladz.com domain =
contains a call to the phpinfo() function, which outputs detailed=
 information about the PHP environment. This information includes=
 the PHP version, server details, loaded extensions, environment =
variables, and more. An attacker can use this data to identify we=
aknesses in the server configuration and potentially craft specif=
ic attacks against the server.</p>=0D=0A=0D=0A    <h3>Steps to Re=
produce:</h3>=0D=0A=0D=0A        <p>1- Open a web browser and nav=
igate to the following URL: https://ms-hostingladz.com/phpinfo.ph=
p</p>=0D=0A        <p>2- The PHP Info page will be displayed, rev=
ealing detailed configuration and environment information about t=
he server.</p>=0D=0A=0D=0A    <h3>Impact:</h3>=0D=0A=0D=0A       =
 <p>Server Fingerprinting:Attackers can fingerprint the server ba=
sed on the disclosed PHP version, server software, and installed =
modules, allowing them to identify specific vulnerabilities to ex=
ploit.</p>=0D=0A        <p>Sensitive Information Disclosure: The =
output may include sensitive information such as environment vari=
ables, file paths, and configuration settings that could be used =
to further compromise the server.</p>=0D=0A        <p>Targeted At=
tacks: With the detailed information provided by the PHP Info pag=
e, attackers can perform targeted attacks against known vulnerabi=
lities in the disclosed PHP version or installed extensions.</p>=0D=0A=
=0D=0A    <h3>Recommendation for Mitigation:</h3>=0D=0A=0D=0A    =
<p>Remove or Restrict Access to PHPInfo Pages: Immediately remove=
 the PhpInfo file or restrict access to the PHP Info page by limi=
ting it to authorized personnel only. This can be achieved by usi=
ng access control mechanisms such as IP whitelisting or password =
protection.</p>=0D=0A=0D=0A    <p>Regularly Audit Server Files: C=
onduct regular audits of server files to ensure that sensitive fi=
les like PHP Info pages are not publicly accessible.</p>=0D=0A=0D=0A=
    <p>Keep PHP and Extensions Updated: Ensure that PHP and all i=
nstalled extensions are regularly updated to the latest versions =
to mitigate the risk of known vulnerabilities being exploited.</p=
>=0D=0A=0D=0A    <p>Minimize Information Disclosure: Configure th=
e PHP environment to minimize information disclosure by disabling=
 expose_php, setting display_errors to Off, and ensuring that sen=
sitive information is not included in the output.</p>=0D=0A=0D=0A=
    <p>I do this work to alert you to potential security issues o=
n your website, and I would greatly appreciate it if you could co=
nsider providing a bounty for the bug I discovered. Such rewards =
motivate me to continue hunting for vulnerabilities and helping t=
o secure websites like yours.</p>=0D=0A=0D=0A    <p>If possible, =
I would be grateful if you could send the reward to my PayPal acc=
ount: <a href=3D'mailto:alihunter.adam@gmail.com'>alihunter.adam@=
gmail.com</a></p>=0D=0A=0D=0A    <p>Additionally, I am happy to c=
reate an invoice for the transfer if that is more convenient for =
you.</p>=0D=0A=0D=0A    <p>I look forward to working together to =
enhance the security of your company's websites.</p>=0D=0A=0D=0A =
   <p>Thank you very much for your time and consideration.</p>=0D=0A=
=0D=0A    <p>Best regards,<br />=0D=0A    Ali Adam</p>=0D=0A</bod=
y>=0D=0A</html>