Database Name Disclosure (MySQL)

Severity:

Low

Summary

Invicti identified a database name disclosure (MySQL) in the error message.

Impact

An attacker can perform brute-force or dictionary-based password guessing on the disclosed database name. It may also help the attacker identify other vulnerabilities or further their exploitation of other identified vulnerabilities.

Remediation

Error messages should be disabled.
Remove this kind of sensitive data from the output.

Required Skills for Successful Exploitation

Actions To Take

Classifications

Vulnerability Index

You can search and find all vulnerabilities

Select Category

Select Vulnerability

Related Vulnerabilities

RevealJs Identified

pH7CMS Detected

Misconfigured Frame

Hammerjs Identified

Reverse Proxy Detected (Skipper)

Database Name Disclosure (MySQL)

Vulnerability Index

Select Category

Select Vulnerability

Featured resources

Build your resistance to threats. And save hundreds of hours each month.