HOW TO HACK www.pgp.com -- stupid CGI script xploit

Go to www.pgp.com

Go To "Keyserver"

Go To "Query"

In the search window, type `whoami` (note the back quotes).

Watch for result.

How stupid.

Seems to be a common problem of cgi scripts.
      
like the one in norway...

xaxaxa