CVE-2003-0118
Published May 12, 2003
Last updated 6 years ago
Overview
- Description
- SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2000:*:developer:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4B1FCA6-8212-45F4-9F6A-BB1E985F13BA"
},
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2000:*:enterprise:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0066D327-AA3D-453D-8DC4-FCCEA4DD72C1"
},
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2000:*:standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD62B7D1-9196-412A-96F7-C649F78E541E"
},
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2000:sp1a:developer:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B06F62E-8D53-4117-BC02-76434F64B0D3"
},
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2000:sp1a:enterprise:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB07ACDA-9DE2-425D-B8CC-71FC5C063C1E"
},
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2000:sp1a:standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE7C6E2A-362A-47A5-8C32-7D28BF732943"
},
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2000:sp2:developer:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F008518-056A-4715-ACEB-D32A2F5550E7"
},
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2000:sp2:enterprise:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBFACFE1-A633-4AFC-9F00-C4CE161D25B8"
},
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2000:sp2:standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8F2D5C0-B8D7-41F3-8E31-83F9B4341CFC"
},
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2002:*:developer:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64C5E7CD-9528-4CE5-9651-0924B30DDF67"
},
{
"criteria": "cpe:2.3:a:microsoft:biztalk_server:2002:*:enterprise:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAD1261A-7BFF-487F-9FF9-F75D54AA8568"
}
],
"operator": "OR"
}
]
}
]