medium5.0Public exploit code
CVE-2005-4550
The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and othe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- oracle Application server discussion forum portlet - Multiple Vulnerabilities2005-12-23 · webapps · jsp · Verified
Impact
The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter with a trailing null byte (%00).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Application Server Discussion Forum Portlet | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=113532633229270&w=2
- http://securityreason.com/securityalert/297
- http://securitytracker.com/id?1015406
- http://www.securityfocus.com/bid/16048
- http://www.vupen.com/english/advisories/2005/3085
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23813
- http://marc.info/?l=full-disclosure&m=113532633229270&w=2
- http://securityreason.com/securityalert/297
- http://securitytracker.com/id?1015406
- http://www.securityfocus.com/bid/16048
- http://www.vupen.com/english/advisories/2005/3085
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23813