Description

Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.

Remediation

References

CVE-2002-1632

Related Vulnerabilities

WordPress Plugin Conditional Marketing Mailer for WooCommerce Security Bypass (1.5.1)

WordPress Plugin Social Gallery and Widget Security Bypass (2.2.5)

Lighttpd Other Vulnerability (CVE-2007-1869)

WordPress Plugin SMTP Mail Cross-Site Scripting (1.3.1)

PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-30545)

Severity

Medium

Classification

CVE-2002-1632

Tags

Missing Update Known Vulnerabilities