SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Data_engine | Microsoft | 2000 (including) | 2000 (including) |
| Sql_server | Microsoft | 2000 (including) | 2000 (including) |