Vulnerability in Ibm Net.commerce

CVE-2001-0319

orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.

EPSS: 0.071 (93.6th percentile) — read the EPSS interpretation.

Affected products

Ibm Net.commerce — versions 2.0, 3.0, 3.1
Ibm Net.commerce_hosting_server — versions 3.1.1, 3.1.2, 3.2
Ibm Websphere_commerce_suite — versions 3.1.2, 3.2, 4.1
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)