Description

Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.

Remediation

References

CVE-2001-1217

Related Vulnerabilities

Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4170)

TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4238)

Microsoft SQL Server CVE-2023-21704 Vulnerability (CVE-2023-21704)

WordPress Plugin Rife Elementor Extensions & Templates Multiple Cross-Site Scripting Vulnerabilities (1.1.5)

WordPress Plugin Event Espresso Lite-Event Management and Registration System SQL Injection (3.1.37.11)

Severity

Medium

Classification

CVE-2001-1217

Tags

Missing Update Known Vulnerabilities