CVE-1999-1375
FileSystemObject - Info Disclosure
Title source: llmDescription
FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Gary Geisbert · textremotemultiple
https://www.exploit-db.com/exploits/19194
Scores
EPSS
0.7404
EPSS Percentile
98.8%
Details
Status
published
Products (2)
microsoft/internet_information_server
3.0
microsoft/internet_information_server
4.0
Published
Feb 11, 1999
Tracked Since
Feb 18, 2026