CVE-2001-0224

medium5.0Public exploit code

CVE-2001-0224

Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Brightstation Muscat 1.0 - Full Path Disclosure2001-02-12 · remote · cgi · Verified

Impact

Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter.

Affected products

Vendor	Product	Affected versions
Brightstation	Muscat Empower	Version 1.0