Netsparker detected that Apache MultiViews is enabled.

This vulnerability can be used for locating and obtaining access to some hidden resources.

An attacker can use this functionality to aid in finding hidden files in the site and potentially gather further sensitive information.
Actions To Take
  1. Change your server configuration file. A recommended configuration for the requested directory should be in the following format:

    <Directory /{YOUR DIRECTORY}>
    	Options FollowSymLinks 

    Remove the MultiViews option from configuration.

WASC-14, OWASP 2013-A5
Vulnerability Index

Vulnerability Index

You can search and find all vulnerabilities

Search Category


Search Vulnerability