CVE-2000-0500

EPSS 4.6%

The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/20027unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=96161462915381&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/4775 http://www.securityfocus.com/bid/1378 http://www.weblogic.com/docs51/admindocs/http.html#file