Description

Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.

Remediation

References

CVE-2002-1632

Related Vulnerabilities

b2evolution Use of Insufficiently Random Values Vulnerability (CVE-2022-30935)

MySQL Other Vulnerability (CVE-1999-1188)

WordPress Plugin Basic Dev Tools Multiple Cross-Site Scripting Vulnerabilities (1.4.1)

MediaWiki Other Vulnerability (CVE-2021-36126)

WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings Cross-Site Scripting (2.2.21)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2002-1632