How a Common Misconfiguration Led to Over 30 Critical Findings
bishopfox.com | vulnerability | #attack-surface | #sql-injection | #penetration-testing | #case-study | #misconfiguration | #credential-exposure
Summary
How an exposed directory on a misconfigured server snowballed into 30+ critical findings: leaked source code revealed database credentials, API keys, and an admin endpoint vulnerable to SQL injection.
- Published
- Collected
--- id: 4088 title: "How a Common Misconfiguration Led to Over 30 Critical Findings" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/misconfiguration-led-to-30-critical-findings" published_at: "2021-02-02T00:00:00Z" tags: ["attack-surface", "sql-injection", "penetration-testing", "case-study", "misconfiguration", "credential-exposure"] phying_url: "https://phying.com/item/4088" lang: en --- # How a Common Misconfiguration Led to Over 30 Critical Findings ## Summary How an exposed directory on a misconfigured server snowballed into 30+ critical findings: leaked source code revealed database credentials, API keys, and an admin endpoint vulnerable to SQL injection. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2021-02-02T00:00:00Z - **Original:** https://bishopfox.com/blog/misconfiguration-led-to-30-critical-findings - **Phying News:** https://phying.com/item/4088