PHPRunner suffers from a database credential disclosure vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/52045/phprunner.txt
Source: https://packetstormsecurity.com/files/52045/phprunner.txt.html