CVE-2001-0319

No fix known EPSS 7%

orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.

Published 2001-05-07 · CVE record · OSV

Products: ibm net.commerce, ibm net.commerce_hosting_server, ibm websphere_commerce_suite