← Database

CVE-2000-1236

HIGH CVSS: 7.5 Published: 2000-12-31 Modified: 2026-06-16

Description

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

Affected Platforms

Oracle Application Server

Weakness Type

NVD-CWE-Other

References