Description
The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.
Remediation
References
Related Vulnerabilities
WordPress Plugin Ultimate Gift Cards For WooCommerce Cross-Site Request Forgery (2.1.1)
OpenSSL Missing Encryption of Sensitive Data Vulnerability (CVE-2019-1547)
Oracle JRE CVE-2017-10309 Vulnerability (CVE-2017-10309)
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.24)
WordPress Plugin Qwizcards-online quizzes and flashcards Cross-Site Scripting (3.61)