Description

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

Remediation

References

CVE-2000-1236

Related Vulnerabilities

PrestaShop Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4545)

WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Request Forgery (1.5.2)

WordPress Plugin Contact Form Email Cross-Site Scripting (1.0)

Craft CMS Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (CVE-2025-68454)

WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.2.13)

Severity

High

Classification

CVE-2000-1236

Tags

Missing Update Known Vulnerabilities