CVE-2002-0555

Currently unrated

Key Information:

Vendor
IBM
Status
Informix Web Datablade
Vendor
CVE Published:
3 July 2002

Summary

IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.

References

http://www.securityfocus.com/bid/4498
vdb-entryx_refsource_BID
http://archives.neohapsis.com/archives/bugtraq/2002-04/01...
mailing-listx_refsource_BUGTRAQ
http://www.iss.net/security_center/static/8827.php
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.