2025-09-09 17:01:32
microsoft
PUBLISHED
Improper neutralization of special elements used in a command (command injection) in SQL Server allows an authorized attacker to elevate privileges over a network.