Information disclosure is a critical bug because it contains the information related to user name, mail_id , password or etc. And i got a log file which contain the administrator mail_id, username or password and also it contain a database details so it must be secure. Because it is very useful for attacker to takeover any other users database without authentication. Hope you check this log file.
Vulnerable link: This is the vulnerable link which disclose install.log file which contain administrator details.
