What’s Vulnerable › Vulnerabilities

CVE-2000-1236

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2000-12-31 · updated 2026-09-23

Description

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

Affected products

• Oracle Application Server: through 3.0.7

References

• http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html
• http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html
• http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
• http://online.securityfocus.com/archive/1/155881
• http://www.iss.net/security_center/static/5817.php
• http://www.securityfocus.com/bid/2150
• http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html
• http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html
• http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html
• http://online.securityfocus.com/archive/1/155881
• http://www.iss.net/security_center/static/5817.php
• http://www.securityfocus.com/bid/2150

Get alerted when CVE-2000-1236 or the next vulnerability affects your stack