CVE-2002-1631

SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.

Date published : 2005-03-26

http://www.securityfocus.com/bid/6556

http://www.kb.cert.org/vuls/id/717827