Description
IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.
References (3)
Core 3
Core References
Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/4498
Vendor Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-04/0137.html
Vendor Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/8827.php
Scores
EPSS
0.0157
EPSS Percentile
72.8%
Details
Status
published
Products (4)
ibm/informix_web_datablade
4.10
ibm/informix_web_datablade
4.11
ibm/informix_web_datablade
4.12
ibm/informix_web_datablade
4.13
Published
Jul 03, 2002
Tracked Since
Feb 18, 2026