Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.
From 神龙GPT (AIGC)
Microsoft Site Server 3.0 Commerce Edition中的示例网站未验证身份号码,这允许远程攻击者执行SQL命令。