944964 - i have found the login credentials for dromaeo.com..

Status: RESOLVED INVALID

(Websites :: Other, defect)

Description

[divakar]

Attachment: credentials.png

proof of concept 

1.i have attached the screenshot in which i got the login credentials for dromaeo.com-->one of your sub domain

2.using this one can login to their sql database and change everything in that particular database...

3.here is the link where i got this bug...

http://src.chromium.org/svn/trunk/src/chrome/test/data/dromaeo/store.php

Comment 1

[Reed Loden [:reed]]

While mysql.dromaeo.com is Internet-accessible (guessing this is on purpose so browser vendors can post test results to it), that username/password combo doesn't work directly (likely using IP ACLs).

$ mysql -u dromaeo -pdromaeo -h mysql.dromaeo.com -D dromaeo
Enter password: 
ERROR 1045 (28000): Access denied for user 'dromaeo'@'<my hostname>' (using password: YES)

cc'ing jresig

Comment 2

[divakar]

kk

Comment 3

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

Do we need to keep this bug? If so who should it be assigned to?

Comment 4

[Reed Loden [:reed]]

Just going to close this out as invalid... This seems on purpose. Opening bug up.