CVE-2000-1236

—

CVSS 2.0

7.5 high

EPSS

—

Published

Dec 31, 2000 (Dec 31, 2000)

Modified

Sep 23, 2026

Description

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

Vendors: oracle
Products: application server
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

NVD CVE.org GitHub PoCs EPSS (—)

In the news0 stories

No ingested article mentions this CVE yet.