CVE-2000-1236
Medium
Elevated severity or exploit probability.
CVSS base
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS — probability of exploitation (30 days)
1.9%
79.2th percentile
CISA KEV
Not listed
Weakness / dates
—
Published 2000-12-31 · modified 2026-09-23
Description
SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.
Affected
References
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
- http://online.securityfocus.com/archive/1/155881
- http://www.iss.net/security_center/static/5817.php
- http://www.securityfocus.com/bid/2150
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
- http://online.securityfocus.com/archive/1/155881
- http://www.iss.net/security_center/static/5817.php
- http://www.securityfocus.com/bid/2150