high7.5Public exploit code
CVE-2002-0554
webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Informix Web Datablade 4.1x - Page Request SQL Injection2002-04-11 · webapps · cgi · Verified
Impact
webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Informix Web Datablade | Versions 4.10, 4.11, 4.12 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0135.html
- http://www.iss.net/security_center/static/8826.php
- http://www.securityfocus.com/bid/4496
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0135.html
- http://www.iss.net/security_center/static/8826.php
- http://www.securityfocus.com/bid/4496