CVE-1999-0360: Microsoft Site Server

High severity, CVSS 7.2. EPSS: 5.6% chance of exploitation in the next 30 days.

MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely.

Affected products

• Microsoft Site Server: version 2.0 only

Published 1999-01-30. Last modified 2026-06-16.