Description

Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.

Remediation

References

CVE-2000-0169

Related Vulnerabilities

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Remote Code Execution (2.0.32)

WordPress Plugin Google Map Remote Code Execution (1.0)

WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.13)

Oracle JRE CVE-2013-2434 Vulnerability (CVE-2013-2434)

Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-44224)

Severity

High

Classification

CVE-2000-0169

Tags

Missing Update Known Vulnerabilities