CVE-2002-0555

IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it...

CVE-2002-0555

IBM Informix Web DataBlade 4.12 unescapes user input even if escaped, enabling remote attackers to execute SQL code in a web form. Root cause is improper input handling that bypasses developer escaping. Public details in connected records confirm the affected product and behavior; no remediation ...