CVE

Id
6947  
CVE No.
CVE-2003-0118  
Status
Candidate  
Description
SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement.  
Phase
Assigned (20030226)  
Votes
None (candidate not yet proposed)  
Comments