Beveiligingsadvies
CVE-2003-0118
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement.