&gt; With the RCE it was simple to read the configuration file to gain the credentials necessary for this database. I connected and dumped the contents of the users table.<p>This was his mistake. This is a huge no-no. You never dump data unless you have permission. It&#x27;s against the terms of most bounty programs.