Sentrifugo Human Resource Management System version 3.2 suffers from a database configuration file disclosure vulnerability.