Prevent vulnerability attacks by using xp_cmdshell

Xp_mongoshell is a system stored procedure in the master database of SQL database. If the SA password is empty or is easily cracked, attackers can use xp_mongoshell to execute any command to operate your computer.

If you do not need to extend the Stored Procedure xp_mongoshell, remove it. Use this SQL statement:

Use master

Sp_dropextendedproc 'xp _ export shell'

Xp_mongoshell is the best way to enter the operating system and a large backdoor left by the database to the operating system. If you need this stored procedure, use this statement to restore it.

Sp_addextendedproc 'xp _ external shell', 'sqlsql70. dll'

The premise is that it is best to make strong passwords for users with high permissions under SQL Server user management.