CVE-2000-1236: SQL Injection
Published Dec 31, 2000
·Updated
SQL injection vulnerability in modsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.
Affected Software
1 affected component
Oracle Application Server<=3.0.7
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2000
CVE Published
05:00 AM
Jul 14, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1236?
CVE-2000-1236 is classified as a high-severity SQL injection vulnerability.
2
How do I fix CVE-2000-1236?
To fix CVE-2000-1236, upgrade to Oracle Internet Application Server version 3.0.8 or later.
3
Who is affected by CVE-2000-1236?
CVE-2000-1236 affects users of Oracle Internet Application Server versions 3.0.7 and earlier.
4
What types of attacks are possible with CVE-2000-1236?
CVE-2000-1236 allows attackers to execute arbitrary SQL commands through crafted URL query strings.
5
What can be done to mitigate CVE-2000-1236?
Mitigation measures for CVE-2000-1236 include applying the latest security patches and using input validation techniques.