CVE Vulnerabilities

CVE-2002-1631

Published: Dec 31, 2002 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.

Affected Software

Name Vendor Start Version End Version
Application_server Oracle 1.0.2 1.0.2
Application_server Oracle 1.0.2.1s 1.0.2.1s
Application_server Oracle 1.0.2.2 1.0.2.2
Application_server Oracle 9.0.2.0.0 9.0.2.0.0
Application_server Oracle 9.0.2.0.1 9.0.2.0.1

References