CVE-2000-1236

published 2000-12-31

CVE-2000-1236: SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
oracle	application_server	<= 3.0.7	—