Description

Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.

Remediation

References

CVE-2002-1632

Related Vulnerabilities

PHP Other Vulnerability (CVE-2003-1302)

Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-8163)

Joomla Improper Authentication Vulnerability (CVE-2022-23795)

PleskWin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35976)

Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-7139)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2002-1632