WTF
Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw.
To be vulnerable, an attacker must have at least one applicable tool or technique that can connect to a system weakness.
In this frame, vulnerability is also known as the attack surface.
This means that this issue provides a gateway to a vuln so there for it is only vuln if your stupid enought to leave DB's or scripts in directories that you thought was private!
Regardless of vuln or not its an issue that needs to be sorted out because ive rooted 2 sites (notified admins) and as you can see by script kiddies this has knocked a few sites down so it needs to be addressed!
all sitting here worrying about me being inarticulate when sites are "vuln" to hackers!