T-SQL : Command injection (job)

The application uses a function for job management using arguments that may have originated from an untrusted source. An adversary can alter the parameters of the job.

Executing commands obtained from data from an untrusted source is insecure.

Command injection vulnerabilities are divided into two categories:

1. An attacker modifies the command itself;
2. An attacker replaces the value of the environment variables, which implicitly changes the semantics of the command being executed.

In the given case, the application is prone to the vulnerability of the first type.

A possible attack scenario:

1. The application receives input data from an untrusted source, for example, user input.
2. The data obtained is used as a part of the string that defines the command.
3. Execution of the command gives an attacker the privileges which he did not previously possess.