inurl:?XDEBUG_SESSION_START=phpstorm

GHDB-ID:

6763

Author:

Lutzenfried

Google Dork Description:

inurl:?XDEBUG_SESSION_START=phpstorm

#Google Dork :

inurl:?XDEBUG_SESSION_START

#Summary:

Xdebug is a php extension that allows to debug php pages, remotely by using DGBp protocol.
- Code execution is possible through eval or property_set xdebug commands.
- Attacker is also able to read content of file using source xdebug command

#Date : 24/01/2021
#Exploit Author : Lutzenfried (Clément  Cruchet)

Thanks,

Lutzenfried (Clément Cruchet)