Feross Aboukhadijeh • 11/17/2011

1% of CMS-Powered Sites Expose Their Database Passwords

Read Original

A security vulnerability in CMS-powered sites (like WordPress, Joomla) exposes database passwords when text editors like Vim or Emacs create backup files (e.g., wp-config.php~). These files are served in plaintext by web servers, allowing unauthorized access. The article details the CMSploit tool used to scan sites, finding 0.77% of CMS sites vulnerable, and explains the technical cause and implications.

0 comments
#web security #Database Security #Wordpress Security
1% of CMS-Powered Sites Expose Their Database Passwords

Comments

No comments yet

Be the first to share your thoughts!

Browser Extension

Get instant access to AllDevBlogs from your browser

Top of the Week

1
Webinar Series – SQL Server Indexing
Koen Verbeeck • 1 votes
2
Risks and Limitations of AI in the Life Sciences
Jeremy Howard • 1 votes
3
1M context is now generally available for Opus 4.6 and Sonnet 4.6
Simon Willison • 1 votes
4
AI is my CMS
Chris Coyier • 1 votes
5
When your coding agent doesn’t understand your project, you’ll get junk
Benjamin Cane • 1 votes
6
LLM Use in the Python Source Code
Miguel Grinberg • 1 votes