Description

IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page (JSP).

Remediation

References

CVE-2002-1822

Related Vulnerabilities

e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3444)

PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-3166)

WordPress Plugin WassUp Real Time Analytics 'spy.php' SQL Injection (1.4.3)

WordPress Plugin Product Input Fields for WooCommerce Arbitrary File Download (1.2.6)

osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-6579)

Severity

Medium

Classification

CVE-2002-1822

Tags

Missing Update Known Vulnerabilities