CVE-2002-0719
Microsoft Content Management Server 2001 - SQL Injection via Resource Request
Title source: llmDescription
SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5422
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041
Third Party Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/9785.php
Scores
EPSS
0.1042
EPSS Percentile
95.3%
Details
Status
published
Products (1)
microsoft/content_management_server
2001 (2 CPE variants)
Published
Aug 12, 2002
Tracked Since
Feb 18, 2026