E-WEBInformationCo. FS-EZViewer(Web) exposes sensitive information in the service. A remote attacker can obtain the database configuration file path through the webpage source code without login. Accessing this path allows attacker to obtain the database credential with the highest privilege and database host IP address. With this information, attackers can connect to the database and perform actions such as adding, modifying, or deleting database contents.

#WEB

The Mozilla Observatory has helped over 240,000 websites by teaching developers, system administrators, and security professionals how to configure their sites safely and securely.

The issue tracker for Firefox and other Mozilla products.

Websites contain several different types of information. Some of it is non-sensitive, for example the copy shown on the public pages. Some of it is sensitive, for example customer usernames, passwords, and banking information, or internal algorithms and private product information.

Latest web security & vulnerabilities, product releases, product docs and faq blogs.

Learn to secure the web one step at a time, with our practical, interactive learning materials. Covering the latest research, and completely free.

Whether you've just started your hacker journey or you're just looking for some new challenges, the Hacker101 CTF has something for you.