2 matches found
CVE-2016-7402: Undefined Security Weakness
SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa system administrator via dbcc importsproc SQL injection...
9.8CVSS5.8AI score0.01066EPSS
SaveExploits0References2
CVE-2002-1137: Undefined Security Weakness
Buffer overflow in the Database Console Command DBCC that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine MSDE 1.0 and Microsoft Desktop Engine MSDE 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data...
7.5CVSS6.5AI score0.09392EPSS
SaveExploits1References1
20