Unscored CVE-2001-0126 EUVD-2001-0126GHSA-82qj-m6p5-xrm7

Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another so…

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet.

References

oracle-xsql-execute-code(5905) vdb-entry
20010123 Patch for Potential Vulnerability in Oracle XSQL Servlet mailing-list
20010109 Oracle XSQL servlet and xml-stylesheet allow executing java on the web server mailing-list