logo

Database

Mysql Password

Description

The source code repository contains sensitive information: MySQL Password

Weakness:

009 - Sensitive information in source code

Category: Information Collection

Detection Strategy

    • Matches MySQL Password patterns in source code and configuration files

Vulnerable code example

mysql://dbuser:s3cr3tpassword@localhost/mydb
jdbc:mysql://admin:P4ssw0rdXyz@db.example.com:3306/app
MYSQL_URL="mysql://root:Hunter2!xYz9@10.0.0.1:3306/prod"