CVE-1999-1180: Oreilly Website

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2) args.bat.

Affected products

• Oreilly Website: version 1.1e only
• Oreilly Website Pro: up to and including 2.4; version 2.0 only; version 2.1 only

Published 1999-02-16. Last modified 2026-06-16.