VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 3, 2002· Updated Jun 16, 2026

CVE-2002-0187

CVE-2002-0187

Description

Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Microsoft/SQL Server3 versions
    cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*
  • Microsoft/SQL Server 2000llm-fuzzy

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.