I have found a arbitrary file download vulnerability in an asp.net application. I've downloaded the web.config and some other files. So what can i do with that "web.config" information ?(for example: connecting to database)
This is an piece of web.config fiele:
<connectionStrings>
<add name="project" connectionString="Data Source=192.168.20.8;Database=newdatabase;User ID=sa;Password=123456Aa" />
Thanks.