EDB-31770

functional

Oracle Application Server Portal 10g - Authentication Bypass

view exploit source exploit_dbverifiedtype remoteauthor Deniz Cevikpublished 2008-05-09catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2008-2138USmedium5.0Exploit
Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of /dav_portal/portal/ by sending a request con…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan