Black & White Path

Jun 13, 2026 · Information Security

My First Medium‑Severity Vulnerability: Exploiting Leaked Test Accounts in an EduCN Portal

The author describes discovering a medium‑severity information‑leak vulnerability in an educational portal by using a Google dork to locate a file exposing three default test accounts, then logging in with the admin credentials (password 123456) after other attack attempts failed.