high7.5Public exploit code
CVE-2002-0982
Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscrip…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft SQL Server 2000 - sp_MScopyscript SQL Injection2002-07-25 · remote · windows · Verified
Impact
Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Sql Server | Version 2000 |