Description
IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability.
References
- 20040205 IBM cloudscape SQL Database (DB2J) vulnerable to remote command mailing-list
- cloudscape-sql-injection(15067) vdb-entry
- 9583 vdb-entry