CVE-2001-0319

Published: May 3, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.

Affected (20)

Products: Ibm: Net.commerce, Net.commerce Hosting Server, Websphere Commerce Suite

Ibm

3 products

Net.commerce

Net.commerce Hosting Server

Websphere Commerce Suite

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Ibm Net.commerce	Version 2.0
Ibm Net.commerce	Version 3.0
Ibm Net.commerce	Version 3.1.1
Ibm Net.commerce	Version 3.1.1
Ibm Net.commerce	Version 3.1.2
Ibm Net.commerce	Version 3.1.2
Ibm Net.commerce	Version 3.1
Ibm Net.commerce	Version 3.1
Ibm Net.commerce	Version 3.2
Ibm Net.commerce	Version 3.2
Ibm Net.commerce Hosting Server	Version 3.1.1
Ibm Net.commerce Hosting Server	Version 3.1.2
Ibm Net.commerce Hosting Server	Version 3.2
Ibm Websphere Commerce Suite	Version 3.1.2
Ibm Websphere Commerce Suite	Version 3.2
Ibm Websphere Commerce Suite	Version 4.1.1
Ibm Websphere Commerce Suite	Version 4.1.1
Ibm Websphere Commerce Suite	Version 4.1
Ibm Websphere Commerce Suite	Version 4.1
Ibm Websphere Commerce Suite	Version 4.1