EIP-2026-102451

PRE-CVE

Oracle 8.1.7 - JSP/JSPSQL Remote File Reading

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102451. PoCs published by Georgi Guninski.

AI-analyzed exploit summary This is a writeup describing a directory traversal vulnerability in Oracle on Windows 2000, allowing remote users to read files outside the webroot via crafted requests to a.jsp or bb.sqljsp. The exploit results in files being copied to the _pages directory with a .java extension.

Description

Oracle 8.1.7 - JSP/JSPSQL Remote File Reading

Exploits (1)

exploitdb WRITEUP VERIFIED
by Georgi Guninski · textremotejsp
https://www.exploit-db.com/exploits/20592

This is a writeup describing a directory traversal vulnerability in Oracle on Windows 2000, allowing remote users to read files outside the webroot via crafted requests to a.jsp or bb.sqljsp. The exploit results in files being copied to the _pages directory with a .java extension.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Oracle on Windows 2000
No auth needed
Prerequisites: Oracle installed on Windows 2000 · Access to the target web server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026