Exploitation Summary
EIP tracks 4 public exploits for CVE-2000-0402.
PoCs published by David Kennedy, including Metasploit module exploits/windows/mssql/mssql_payload.
AI-analyzed exploit summary This Metasploit module exploits SQL injection vulnerabilities in Microsoft SQL Server to execute arbitrary payloads via xp_cmdshell. It supports multiple delivery methods including debug.exe, command stager, and PowerShell.
Description
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.
Exploits (4)
This Metasploit module exploits SQL injection vulnerabilities in Microsoft SQL Server to execute arbitrary payloads via xp_cmdshell. It supports multiple delivery methods including debug.exe, command stager, and PowerShell.
This Metasploit module exploits Microsoft SQL Server by leveraging the 'xp_cmdshell' stored procedure to execute arbitrary payloads. It supports multiple delivery methods, including debug.com, Command Stager, and PowerShell, to achieve remote code execution.
This Metasploit module exploits Microsoft SQL Server by leveraging the 'xp_cmdshell' stored procedure to execute arbitrary payloads. It supports multiple delivery methods, including PowerShell, command stager, and debug.exe, to achieve remote code execution.
This Metasploit module exploits SQL injection vulnerabilities in Microsoft SQL Server to execute arbitrary payloads via xp_cmdshell. It supports multiple delivery methods, including PowerShell, Command Stager, and debug.exe, and is designed for remote code execution (RCE).