VYPR
← All advisories
Unrated severityNVD Advisory· Published May 12, 2003· Updated Jun 16, 2026

CVE-2003-0118

CVE-2003-0118

Description

SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Microsoft/Biztalk Server12 versions
    cpe:2.3:a:microsoft:biztalk_server:2000:*:developer:*:*:*:*:*+ 11 more
    • cpe:2.3:a:microsoft:biztalk_server:2000:*:developer:*:*:*:*:*
    • cpe:2.3:a:microsoft:biztalk_server:2000:*:enterprise:*:*:*:*:*
    • cpe:2.3:a:microsoft:biztalk_server:2000:sp1a:developer:*:*:*:*:*
    • cpe:2.3:a:microsoft:biztalk_server:2000:sp1a:enterprise:*:*:*:*:*
    • cpe:2.3:a:microsoft:biztalk_server:2000:sp1a:standard:*:*:*:*:*
    • cpe:2.3:a:microsoft:biztalk_server:2000:sp2:developer:*:*:*:*:*
    • cpe:2.3:a:microsoft:biztalk_server:2000:sp2:enterprise:*:*:*:*:*
    • cpe:2.3:a:microsoft:biztalk_server:2000:sp2:standard:*:*:*:*:*
    • cpe:2.3:a:microsoft:biztalk_server:2000:*:standard:*:*:*:*:*
    • cpe:2.3:a:microsoft:biztalk_server:2002:*:developer:*:*:*:*:*
    • cpe:2.3:a:microsoft:biztalk_server:2002:*:enterprise:*:*:*:*:*
    • (no CPE)range: 2000, 2002

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.