Another important issue that could be used to get full control of the server that is hosting the application is the default credentials. There are many web servers, mail servers, database servers, CMSs, eCommerce tools, and so on that, when installed, have established a default password. It is so easy for a malicious user to get access to these services and applications.