CVE-2002-0187

published 2002-07-03

CVE-2002-0187: Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	sql_server	—	—