CVE-2002-0187

Published: Jul 3, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."

Affected (3)

Products: Microsoft: Sql Server

Microsoft

1 product

Sql Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Sql Server	Version 2000
Microsoft Sql Server	Version 2000 sp1
Microsoft Sql Server	Version 2000 sp2

References (6)

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html

Source: cve@mitre.org

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=102397345410856&w=2

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=102397345410856&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.