Description

Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.

Remediation

References

CVE-2001-1217

Related Vulnerabilities

Envoy Proxy Use After Free Vulnerability (CVE-2022-29227)

Joomla! Core 3.x.x Cross-Site Scripting (3.0.0 - 3.9.15)

WordPress Plugin WP Fastest Cache SQL Injection (1.2.1)

Oracle JRE CVE-2020-2757 Vulnerability (CVE-2020-2757)

WordPress Plugin Redirect 404 Error Page to Homepage or Custom Page with Logs Cross-Site Request Forgery (1.7.8)

Severity

Medium

Classification

CVE-2001-1217

Tags

Missing Update Known Vulnerabilities