VDB

GCVE-110-CERTCC-2001-758483

GCVE-110-CERTCC-2001-758483
Advisory Published
Vulnetix · Advisory published December 13, 2001
A vulnerability exists in the Apache Procedural Language/Structured Query Language (PL/SQL) module used by Oracle9i Application Server (iAS) in which the module does not properly decode double URL encoded strings. This vulnerability could allow an intruder to read files outside the web server's root directory.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact4population7exploitation0widely_known16score_current3.99ease_of_exploitation20

Aliases

CVE-2001-1217

References

Oracle9i Application Server Apache PL/SQL module does not properly decode URL
advisory
Oracle9i Application Server Apache PL/SQL module does not properly decode URL
url
Oracle9i Application Server Apache PL/SQL module does not properly decode URL
url
Oracle9i Application Server Apache PL/SQL module does not properly decode URL
url
Oracle9i Application Server Apache PL/SQL module does not properly decode URL
url
Oracle9i Application Server Apache PL/SQL module does not properly decode URL
url
Oracle9i Application Server Apache PL/SQL module does not properly decode URL
url
Oracle9i Application Server Apache PL/SQL module does not properly decode URL
url
Oracle9i Application Server Apache PL/SQL module does not properly decode URL
url
Oracle9i Application Server Apache PL/SQL module does not properly decode URL
url

Browse GCVE Records

72,580 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›