CVE-2000-0161: Microsoft Site Server

High severity, CVSS 7.5. EPSS: 10.1% chance of exploitation in the next 30 days.

Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.

Affected products

• Microsoft Site Server: version 3.0 only

Published 2000-02-18. Last modified 2026-06-16.