CVE-2002-0645

SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-08-12

Last modified

2024-08-08

Affected products

• Data Engine (Microsoft)
• Sql Server (Microsoft)

References

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038