Description
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.
References (2)
Core 2
Core References
Exploit, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/2587
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/176100
Scores
EPSS
0.0145
EPSS Percentile
70.6%
Details
Status
published
Products (2)
ibm/net.commerce
3.1.2
ibm/websphere_application_server
5.1.0.3
Published
Jul 02, 2001
Tracked Since
Feb 18, 2026