5 lines
No EOL
448 B
Text
5 lines
No EOL
448 B
Text
source: http://www.securityfocus.com/bid/1178/info
|
|
|
|
Requesting an invalid database file from a web server implementing Gossamer Threads DBMan scripts will return a CGI error message containing environmental variables to a remote user without any authorization. The parameters displayed include the local document root path, server administrator account name, web server software, platform, etc.
|
|
|
|
http://target/scripts/dbman/db.cgi?db=invalid-db |