Vulnerability in Oracle Application Server Discussion Forum Portlet
CVE-2005-4550
The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter with a trailing null byte (%00).
EPSS: 0.061 (92.7th percentile) — read the EPSS interpretation.
Affected products
- Oracle Application_server_discussion_forum_portlet
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)