Back to main page

MS SQL sp_configure: configuration change

Category:

Command Injection

Sub-category:

SQL Injection

Severity:

low

Description:

Detects attempt to perform a MS SQL configuration change using xp_cmdshell Server Configuration Option.