CVE-1999-1520

Microsoft Site Server 3.0 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-1520. PoCs published by Andrey Kruchkov.

AI-analyzed exploit summary This is a writeup describing an information disclosure vulnerability in Microsoft Site Server's Ad Server Sample directory, allowing unauthorized access to the SITE.CSC configuration file containing SQL database credentials.

Description

A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Andrey Kruchkov · textremotewindows
https://www.exploit-db.com/exploits/19208

This is a writeup describing an information disclosure vulnerability in Microsoft Site Server's Ad Server Sample directory, allowing unauthorized access to the SITE.CSC configuration file containing SQL database credentials.

Classification
Writeup 100%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Microsoft Site Server (Ad Server Sample directory)
No auth needed
Prerequisites: AdSamples directory installed · No access controls applied
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/256
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=92647407227303&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/2270

Scores

EPSS 0.1064
EPSS Percentile 95.3%

Details

Status published
Products (1)
microsoft/site_server 3.0
Published May 11, 1999
Tracked Since Feb 18, 2026