Vulnerability in Ibm Informix Web Datablade
CVE-2002-0555
IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.
EPSS: 0.016 (72.8th percentile) — read the EPSS interpretation.
Affected products
- Ibm Informix_web_datablade — versions 4.10, 4.11, 4.12
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)