An issue in SCHUHFRIED v.8.22.00 allows remote attacker to obtain the database password via crafted curl command.