CVE-2000-1236 in Internet Application Server

Sumário

de MITRE

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 14/07/2005
• Divulgação: 31/12/2000
• Moderação: aceite
• Entrada: VDB-16221
• CPE: pronto
• CWE: CWE-89 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00972
• KEV: não
• Atividades: muito baixo
• Sector: Pharma, Government, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2000-1236
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2000-1236
• CVE Details: https://www.cvedetails.com/cve/CVE-2000-1236/