SQL Injection Vulnerability in Microsoft BizTalk Server DTA
CVE-2003-0118

Currently unrated

Key Information:

Vendor

Microsoft
Status
Biztalk Server
Vendor
CVE Published:
12 May 2003

What is CVE-2003-0118?

The Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 is affected by a SQL injection vulnerability. This flaw allows remote attackers to execute arbitrary operating system commands through specially crafted requests to specific ASP pages, namely rawdocdata.asp and RawCustomSearchField.asp, which contain embedded SQL statements. Exploiting this vulnerability could lead to serious security breaches, compromising the integrity of affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://marc.info/?l=bugtraq&m=105216839231951&w=2
mailing-listx_refsource_BUGTRAQ
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.