COMMAND
Empower
SYSTEMS AFFECTED
Muscat Empower
PROBLEM
Following is based on a UkR security team advisory #6. When the
request invalid send to database script print path to it.
Exploit:
http://www.example.com/cgi-bin/empower?DB=UkRteamHole
http://www.nokia.com/cgi-bin/empower?DB=UkRteamHole
http://www.hmso.gov.uk/cgi-bin/empower?DB=UkRteamHole
SOLUTION
Nothing yet.