Critical sensitive information Disclosure. [HtUS]

How it was found

(Database user,Database password,Database name) on https://██████.edu/

I got sensitive information: view-source:https://██████████.edu/database.php.orig

Database information (Database user,Database password,Database name) $hostname = '████████.edu'; $db = '█████████'; $username = '████_user'; $password = '████';

Impact

Bug impact: Sensitive information disclosed and possible for an attacker can access into the system.