3 matches found
CVE-2002-0555
IBM Informix Web DataBlade 4.12 unescapes user input even if escaped, enabling remote attackers to execute SQL code in a web form. Root cause is improper input handling that bypasses developer escaping. Public details in connected records confirm the affected product and behavior; no remediation ...
CVE-2001-0924
CVE-2001-0924 describes a directory traversal vulnerability in the Informix SQL Web DataBlade CGI (LO parameter) that allows remote attackers to read arbitrary files on the affected system. The issue arises from improper handling of the .. (dot dot) path traversal in the LO parameter of the ifx C...
CVE-2002-0554
The CVE-2002-0554 issue affects IBM Informix Web DataBlade 4.12, where a SQL injection in an HTTP request allows remote attackers to bypass user access levels or read arbitrary files. This is documented in NVD/NVD-linked records; no explicit exploit details or remediation are provided in the conn...