CWE-541
Inclusion of Sensitive Information in an Include File
If an include file source is accessible, the file can contain usernames and passwords, as well as sensitive information pertaining to the application and system.
Impactr finds and proves whether CWE-541 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.