• info
• discussion
• exploit
• solution
• references

Sambar Server Information Disclosure Vulnerability

The following proof of concepts were provided:

http://[target]/cgi-bin/environ.pl
http://[target]/cgi-bin/testcgi.exe