CVE Vulnerabilities

CVE-2001-0319

Published: May 03, 2001 | Modified: Oct 10, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.

Affected Software

Name Vendor Start Version End Version
Net.commerce Ibm 2.0 2.0
Net.commerce Ibm 3.0 3.0
Net.commerce Ibm 3.1 3.1
Net.commerce Ibm 3.1 3.1
Net.commerce Ibm 3.1.1 3.1.1
Net.commerce Ibm 3.1.1 3.1.1
Net.commerce Ibm 3.1.2 3.1.2
Net.commerce Ibm 3.1.2 3.1.2
Net.commerce Ibm 3.2 3.2
Net.commerce Ibm 3.2 3.2
Net.commerce_hosting_server Ibm 3.1.1 3.1.1
Net.commerce_hosting_server Ibm 3.1.2 3.1.2
Net.commerce_hosting_server Ibm 3.2 3.2
Websphere_commerce_suite Ibm 3.1.2 3.1.2
Websphere_commerce_suite Ibm 3.2 3.2
Websphere_commerce_suite Ibm 4.1 4.1
Websphere_commerce_suite Ibm 4.1 4.1
Websphere_commerce_suite Ibm 4.1 4.1
Websphere_commerce_suite Ibm 4.1.1 4.1.1
Websphere_commerce_suite Ibm 4.1.1 4.1.1

References