CVE-1999-0360

High

Published: 30/01/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.58%

92th percentile - higher than 92% of all known CVEs

Summary

MS Site Server 2.0 with IIS 4 allows users to upload content, including ASP, to the target website, thus enabling remote command execution.

Risk Assessment

Exploitation of this vulnerability may lead to remote code execution, posing a serious threat to the security of the system and the organization's data.

Recommendation

It is recommended to upgrade to a newer version of the software and implement appropriate security measures to restrict unauthorized content uploads.

Original NVD description (English source)

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.