CVE-2000-0161

High

Published: 18/02/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

10.07%

95th percentile - higher than 95% of all known CVEs

Summary

Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, allowing remote attackers to execute SQL commands.

Risk Assessment

The lack of validation for the identification number poses a risk of unauthorized SQL command execution, potentially leading to data loss or system compromise.

Recommendation

It is recommended to implement identification number validation in applications using Microsoft Site Server 3.0 Commerce Edition.

Original NVD description (English source)

Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.