I visited budgettravel.mu[1] and found that the website has files &
directories in public view that could potentially harm the server and other
websites running on the same.
My finding also lead to the discovery of an SQL[2] file containing IP and
email addresses that could be used to identify people. I am therefore
copying this email to the Data Protection Commissioner (I could not find
the office general enquiry email + online complaint form[3] isn't working).
Security-wise there is a direcory named "hackinglogs" under budgettravel.mu
that contains several other files with content designed for phishing
scams[4].
I therefore flag this as a security vulnerability and privacy breach.
