Exposure of Sensitive Debug File Containing database dump with passwords in plain text
该报告还没有中文解读。
原文摘录
摘自原文（1238 字符中的一小部分）
**Description:** A publicly accessible debug file (debug.txt) was discovered on the target web application, exposing sensitive database credentials, including usernames and passwords. This issue poses a severe security risk as it allows unauthorized access to the database, potentially leading to …
原文中的代码
[user] => orgpri
[passwd] => 12!@QWasz
[dbname] => org_priority
[dbtype] => mysql
[server] => mysql默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 U.S. Dept Of Defense 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @jonasdiasrebelo · 版权归作者与 U.S. Dept Of Defense 所有