CVE-1999-0360

MS Site Server 2.0 - Command Injection

Title source: llm
STIX 2.1

Description

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Mnemonix · textremotewindows
https://www.exploit-db.com/exploits/20305

References (1)

Core 1
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=91763097004101&w=2

Scores

EPSS 0.0777
EPSS Percentile 92.0%

Details

Status published
Products (1)
microsoft/site_server 2.0
Published Jan 30, 1999
Tracked Since Feb 18, 2026