Possible Vulnerability

[HKResearch]

Hello,

We are conducting research on the unintended exposure of secrets in GitHub repositories. In a recent scan we conducted of GitHub repositories, our tool detected that one of your repositories appears to expose a secret, and we've confirmed this possibility by manual inspection. The details are below:

# Branch: master
## File: chris/wp-config.php
## Line: 22


# Branch: master
## File: chris/wp-config.php
## Line: 28


# Branch: master
## File: chris/wp-config.php
## Line: 25

If this information is indeed intended to be secret, we would recommend that you remove this file from the repository (using .gitignore) and generate new passwords for the vulnerable accounts. We would much appreciate a response, letting us know if we are mistaken in concluding that this is a secret, or if you made changes as a result of this report.

Thank you.

[azbarcea]

Hi,

This might have been a vulnerability. It was a project for StartupWeekend,
and it is used now as an example, though.

Thank you,
Wizant Team

On Thu, Jul 3, 2014 at 7:56 PM, HKResearch notifications@github.com wrote:

Hello,

We are conducting research on the unintended exposure of secrets in GitHub
repositories. In a recent scan we conducted of GitHub repositories, our
tool detected that one of your repositories appears to expose a secret, and
we've confirmed this possibility by manual inspection. The details are
below:

Branch: master

File: chris/wp-config.php

Line: 22

Branch: master

File: chris/wp-config.php

Line: 28

Branch: master

File: chris/wp-config.php

Line: 25

If this information is indeed intended to be secret, we would recommend
that you remove this file from the repository (using .gitignore) and
generate new passwords for the vulnerable accounts. We would much
appreciate a response, letting us know if we are mistaken in concluding
that this is a secret, or if you made changes as a result of this report.

Thank you.

—
Reply to this email directly or view it on GitHub
#1.