Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.
Loading...
Loading...
Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.
September 24, 2002
April 16, 2026
Working exploit code is in the public domain (1 Exploit-DB entry). Defenders should treat patch urgency accordingly — public PoCs typically lead to mass-exploitation within 24-72 hours.
Microsoft SQL Server 2000 - sp_MScopyscript SQL Injection
Open source ↗See which npm, PyPI, Go, and Maven packages are affected by CVE-2002-0982
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.