The Unix versions of the PerlCal CGI script have vulnerabilities which allow website visitors to view any file on the webserver. Exploit URL included.
6008fabe1a329e1cad455aa8c84eeb5e7a5393d69a639699c592aa9613882baf
Talkback.cgi allows remote users to view any file on the webserver. Exploit URL included. It is also possible to display the admin password. Fix available here.
e4e768f74ba3a8097a57dd1359054407e765b0969853046f335247b526a09588