Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.
CWE-749