Description
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
Remediation
References
Related Vulnerabilities
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-8563)
WordPress Plugin Facebook for WooCommerce Cross-Site Request Forgery (1.9.14)
WordPress Plugin Price Commander for WooCommerce Security Bypass (1.2.2)
OpenSSL Out-of-bounds Read Vulnerability (CVE-2023-1255)
ownCloud Improper Authentication Vulnerability (CVE-2012-4392)