high7.5
CVE-2002-0555
IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web for…
Impact
IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Informix Web Datablade | Versions 4.10, 4.11, 4.12, 4.13 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0137.html
- http://www.iss.net/security_center/static/8827.php
- http://www.securityfocus.com/bid/4498
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0137.html
- http://www.iss.net/security_center/static/8827.php
- http://www.securityfocus.com/bid/4498