high7.5
CVE-2000-1236
SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands …
Impact
SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Application Server | through 3.0.7 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
- http://online.securityfocus.com/archive/1/155881
- http://www.iss.net/security_center/static/5817.php
- http://www.securityfocus.com/bid/2150
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
- http://online.securityfocus.com/archive/1/155881
- http://www.iss.net/security_center/static/5817.php
- http://www.securityfocus.com/bid/2150