Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-0224. PoCs published by cuctema.
AI-analyzed exploit summary This exploit demonstrates an information disclosure vulnerability in Brightstation Muscat by sending an invalid request to the CGI script, which reveals the physical path to the root directory.
Description
Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by cuctema · textremotecgi
https://www.exploit-db.com/exploits/20633
This exploit demonstrates an information disclosure vulnerability in Brightstation Muscat by sending an invalid request to the CGI script, which reveals the physical path to the root directory.
Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
Brightstation Muscat
No auth needed
Prerequisites:
Target running Brightstation Muscat with accessible CGI script
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/6093
Exploit, Vendor Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2001-02/0216.html
Exploit, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/2374
Scores
EPSS
0.0732
EPSS Percentile
93.6%
Details
Status
published
Products (1)
brightstation/muscat_empower
1.0
Published
Jun 02, 2001
Tracked Since
Feb 18, 2026