Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-0360

4 documents4 sources
Severity
7.2HIGH
EPSS
7.8%
top 8.05%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Site Server
Timeline
PublishedJan 30
Latest updateApr 30

Description

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-jrg6-c727-f24w: MS Site Server 2↗2022-04-30
▶
CVEList
CVE-1999-0360: MS Site Server 2↗2000-02-04
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Site Server 2.0 with IIS 4.0 - Arbitrary File Upload↗1999-01-30
▶
CVE-1999-0360 (HIGH CVSS 7.2) | MS Site Server 2.0 with IIS 4 can a | cvebase.io