Page 7 of 62 results (0.001 seconds)

CVSS: 9.8EPSS: 1%CPEs: 4EXPL: 0

11 Jun 2002 — IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it. • http://archives.neohapsis.com/archives/bugtraq/2002-04/0137.html •

CVSS: 7.5EPSS: 11%CPEs: 8EXPL: 2

22 Nov 2001 — Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter. • https://www.exploit-db.com/exploits/21160 •