CVE-2003-0118

SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:biztalk_server:2000:*:developer:*:*:*:*:*
cpe:2.3:a:microsoft:biztalk_server:2000:*:enterprise:*:*:*:*:*
cpe:2.3:a:microsoft:biztalk_server:2000:*:standard:*:*:*:*:*
cpe:2.3:a:microsoft:biztalk_server:2000:sp1a:developer:*:*:*:*:*
cpe:2.3:a:microsoft:biztalk_server:2000:sp1a:enterprise:*:*:*:*:*
cpe:2.3:a:microsoft:biztalk_server:2000:sp1a:standard:*:*:*:*:*
cpe:2.3:a:microsoft:biztalk_server:2000:sp2:developer:*:*:*:*:*
cpe:2.3:a:microsoft:biztalk_server:2000:sp2:enterprise:*:*:*:*:*
cpe:2.3:a:microsoft:biztalk_server:2000:sp2:standard:*:*:*:*:*
cpe:2.3:a:microsoft:biztalk_server:2002:*:developer:*:*:*:*:*
cpe:2.3:a:microsoft:biztalk_server:2002:*:enterprise:*:*:*:*:*

History

No history.

Information

Published : 2003-05-12 04:00

Updated : 2024-02-04 16:31


NVD link : CVE-2003-0118

Mitre link : CVE-2003-0118

CVE.ORG link : CVE-2003-0118


JSON object : View

Products Affected

microsoft

  • biztalk_server