Application error or warning messages may expose sensitive information about an application's internal workings to an attacker.

CyStack found that the PHP display_errors directive is enabled.

Adjust php.ini or .htaccess (mod_php with Apache HTTP Server) to disable display_errors (refer to 'Detailed information' section).