Description

rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.

Remediation

References

CVE-2002-1089

Related Vulnerabilities

ownCloud Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-1850)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-32297)

WordPress Plugin LearnDash LMS Arbitrary File Upload (2.5.3)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2112)

WordPress 4.9.x Arbitrary File Deletion Vulnerability (4.9 - 4.9.6)

Severity

Medium

Classification

CVE-2002-1089

Tags

Missing Update Known Vulnerabilities