Description

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.

Remediation

References

CVE-2002-0562

Related Vulnerabilities

WordPress Plugin Form Builder CP Cross-Site Scripting (1.2.14)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4332)

PHP Other Vulnerability (CVE-2014-9425)

Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-2363)

WordPress Plugin Contact Form by WPForms-Drag & Drop Form Builder for WordPress Cross-Site Scripting (1.6.0.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2002-0562