CVE-2000-0161

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Feb 18, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-01625.1The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that CVE-2000-01634.6asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.CVE-2000-01647.2The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.CVE-2000-01657.5The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.CVE-2000-016610.0Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.CVE-2000-01672.1IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pi CVE-2000-01685.0Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka th CVE-2000-01697.5Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.CVE-2000-01707.2Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.CVE-2000-01717.2atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privi CVE-2000-01727.2The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.CVE-2000-01735.0Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.