4 ms·

How can you tell that? Just because it specifies "localhost" doesn't necessarily mean it's a dev box.

• ishener 11y ago
  Exactly. Also remember that on many many wordpress servers you also have phpMyAdmin. You can use the username + password to login, and you'll get access even when it's restricted to localhost.
  • 0x0 11y ago
    It's pretty scary to have phpMyAdmin public facing. IIRC some older versions of mysql-server even had a bug where it'd let you in with a random password in 1/256 chance!
    • leni536 11y ago
      It should be really bad, since phpmyadmin get attempts are the most frequent on my home webserver and I don't even have it installed. Maybe older vulnerable versions are still around though.