HOW TO HACK www.pgp.com -- stupid CGI script xploit

Secret Squirrel nobody at squirrel.owl.de
Sun Dec 29 19:33:44 PST 1996


Go to www.pgp.com

Go To "Keyserver"

Go To "Query"

In the search window, type `whoami` (note the back quotes).

Watch for result.

How stupid.

Seems to be a common problem of cgi scripts.
      
like the one in norway...

xaxaxa






More information about the cypherpunks-legacy mailing list