EIP-2026-107268

This is a writeup describing an information disclosure vulnerability in Froxlor Server Management Panel versions <= 0.9.33.1. The issue arises due to incorrect file permissions on the /logs/ directory, allowing unauthenticated remote attackers to access MySQL credentials stored in sql-error.log.