CVE-1999-1180

Medium

Published: 16/02/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.69%

74th percentile - higher than 74% of all known CVEs

Summary

O'Reilly WebSite 1.1e and Website Pro 2.0 allow remote attackers to execute arbitrary commands via shell metacharacters in an argument to args.cmd or args.bat.

Risk Assessment

Attackers may gain full control over the system, leading to serious security breaches and potential data loss.

Recommendation

It is recommended to update the software to the latest version and implement input validation to block shell metacharacters.

Original NVD description (English source)

O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2) args.bat.