================================================================================ # Ms & OGC Workshop -PHPInfo Information Disclosure ================================================================================ # Product Name : MapServer and OGC Web Services Workshop # Vendor Homepage: https://github.com/mapserver/ms-ogc-workshop/ , http://www.maptools.org/ # Date: 10/02/216 # Software Link: https://github.com/mapserver/ms-ogc-workshop/archive/master.zip # Author: Ashiyane Digital Security Team # Contact: hehsan979@gmail.com # Source: http://ehsansec.ir/advisories/ms-ogc-phpinfo.txt ================================================================================ # PoC : http://127.0.0.1/ms-ogc-workshop/etc/phpinfo.php http://127.0.0.1/phpinfo.php http://127.0.0.1/phpinfo_mapscript.php # Demo : http://194.94.81.182/ms_ogc_workshop/etc/phpinfo.php http://190.136.181.39/phpinfo.php http://gisl.nateko.lu.se/phpinfo_mapscript.php ================================================================================ # Discovered By : Ehsan Hosseini (EhsanSec.ir) ================================================================================