Description

The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.

Remediation

References

CVE-2002-1635

Related Vulnerabilities

WordPress Plugin WooPay-Inicis Cross-Site Scripting (1.1.3)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9407)

WordPress Plugin Community Events SQL Injection (1.3.5)

WordPress Plugin BP Profile Search PHP Object Injection (4.5.3)

WordPress Plugin Per page add to head Cross-Site Scripting (1.4.4)

Severity

Medium

Classification

CVE-2002-1635

Tags

Missing Update Known Vulnerabilities