2973
" After few trials and errors trying to reproduce the issue , I found that the very first call to passwordrecovered.cgi will give out the credentials no matter what the parameter you send .
 I: discoverer; the issue: vulnerability; passwordrecovered.cgi will give out the credentials: capabilities
Given event type and trigger, please tell me the arguments of all the listed option. Output format is "name1: role1; name2: role2". 
Event type: discover vulnerability 
  Option: vulnerable system owner, vulnerability, capabilities, time, vulnerable system version, discoverer, common vulnerabilities and exposures, supported platform, vulnerable system 
Text: {0} 
Answer:
 I: discoverer; the issue: vulnerability; passwordrecovered.cgi will give out the credentials: capabilities