Description

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

Remediation

References

CVE-2000-1236

Related Vulnerabilities

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3732)

WordPress Plugin Viral Quiz Maker-OnionBuzz SQL Injection (1.2.6)

WordPress Possible SQL Injection Vulnerability (0.70 - 3.6.1)

CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0978)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2000-1236