CVE-2003-0118: Microsoft Biztalk Server

High severity, CVSS 7.5. EPSS: 8.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an embedded SQL statement.

Affected products

• Microsoft Biztalk Server: version 2000 only; version 2002 only

Published 2003-05-12. Last modified 2026-06-16.