CVE-2000-1236 Information

Description

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

Reference

http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html http://online.securityfocus.com/archive/1/155881 http://www.iss.net/security_center/static/5817.php http://www.securityfocus.com/bid/2150