Unscored CVE-2001-0389 EUVD-2001-0386GHSA-96fj-94r5-8c5r

IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro w…

Published May 24, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.

References

2587 vdb-entry
20010413 [LoWNOISE] IBM Websphere/NetCommerce3 DoS and one more. mailing-list