Oracle Demantra 12.2.1 Arbitrary File Retrieval

Vulnerability title: Local File Inclusion in Oracle Demantra CVE: CVE-2013-5877 Vendor: Oracle Product: Demantra Affected version: 12.2.1 Fixed version: 10.1.1.2 Reported by: Oliver Gruskovnjak Details: A Local File Include LFI vulnerability has been discovered in Oracle Demantra. The vulnerabili...

CVE-2013-5877

creationtimestamp| type| source ---|---|--- 2014-03-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31992 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/oracledemantrafileretrieval.rb 2025-02-06...

CVE-2013-5877

Mode C: CVE-2013-5877 affects Oracle Demantra Demantra/GraphServlet components across multiple 7.x and 12.2.x versions of Oracle Supply Chain Products Suite (including 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, 12.2.1). Public details in connected sources describe an arbitrary file retrieval/local...