CVE-2002-1451 Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "" (backslash) character.
MediumCVSS 5.0
EPSS 8.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "" (backslash) character.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| desiderata software blazix | = 1.2 | No fix listed |
| desiderata software blazix | = 1.2.1 | No fix listed |
References
- 20020824 Blazix 1.2 jsp view and free protected folder access mailing-list
- blazix-unauth-file-access(9952) vdb-entry
- 5566 exploit vdb-entry vendor-advisory
- 5567 vdb-entry