high7.5
CVE-2002-1631
SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql …
Impact
SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Application Server | Versions 1.0.2, 1.0.2.1s, 1.0.2.2, 9.0.2.0.0, 9.0.2.0.1 |
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/717827
- http://www.kb.cert.org/vuls/id/SVIM-576QLZ
- http://www.nextgenss.com/papers/hpoas.pdf
- http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf
- http://www.securityfocus.com/bid/6556
- http://www.kb.cert.org/vuls/id/717827
- http://www.kb.cert.org/vuls/id/SVIM-576QLZ
- http://www.nextgenss.com/papers/hpoas.pdf
- http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf
- http://www.securityfocus.com/bid/6556