CVE-2003-0118

CVE-2003-0118 affects Microsoft BizTalk Server 2000 and 2002 through the Document Tracking and Administration (DTA) web interface. The vulnerability is a SQL injection in two endpoints (rawdocdata.asp and RawCustomSearchField.asp) that allows remote attackers to embed SQL statements and, per desc...

CVE-2003-0118

SQL injection vulnerability in the Document Tracking and Administration DTA website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to 1 rawdocdata.asp or 2 RawCustomSearchField.asp containing an embedded SQL statement...