[noonetrust]

An exposed endpoint belonging to the SITOMAS application managed by Magelang City Government (Pemerintah Kota Magelang) was identified.
The issue originates from a publicly accessible application endpoint that unintentionally returns downloadable SQL backup database files (.sql).
Affected Platform:

• SITOMAS Application
  
• Managed by: Magelang City Government
  
• Country: Indonesia
  

Exposure Details:
The exposed SQL backup appears to contain approximately 250 tables related to community organization (Organisasi Masyarakat / ORMAS) administration and internal platform management.
Observed data structures include:

• Chairman full names
  
• Treasurer full names
  
• Full addresses
  
• Phone numbers
  
• Email addresses
  
• Usernames
  
• Password fields
  
• Customer names & emails
  
• Internal user tables containing usernames, passwords, and emails
  

Important Disclaimer:

• No sensitive or personal data will be publicly shared in this thread.
  
• This post is intended solely to document and validate the existence of the exposure.
  

To verify the legitimacy of the issue, a validation package containing a Proof-of-Concept (PoC) tool is available.

• Download: https://gofile.io/d/mQlpsC
  
• ZIP Password: G6lukYbnE#iaCN33
  

The PoC package is provided strictly for validation and research purposes only.

Status:

• Exposure confirmed
  
• Public endpoint accessible at time of writing
  
• Responsible disclosure status unknown
  

[suicided]

Your Thread was moved to the "Other Leaks" category as it fits better there.

Please note that the "Databases" section is only for leaked databases. Scrapes, Consumer Data, Collections of data or any other types of data should be shared in the "Other Leaks" section. The Databases section is strictly for databases which were breached and nothing else.

Threads that are also too vague (I.e. stuff titled "USA DATABASE") will be moved to Other Leaks as you didn't provide the source where the information originated from.

If you constantly ignore the section rules you will be punished.