Description

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

Remediation

References

CVE-2000-1236

Related Vulnerabilities

WordPress Plugin Simple Events Calendar SQL Injection (1.3.5)

WordPress Plugin All-in-One WP Migration Cross-Site Scripting (7.62)

WordPress Plugin WordPress Download Manager Directory Traversal (2.6.95)

Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-4115)

WordPress Plugin LearnDash LMS Multiple Information Disclosure Vulnerabilities (4.10.2)

Severity

High

Classification

CVE-2000-1236

Tags

Missing Update Known Vulnerabilities