CVE-1999-0360

CVE-1999-0360 describes a critical vulnerability in Microsoft Site Server 2.0 when used with IIS 4.0, allowing authenticated users to upload arbitrary files, including ASP scripts, to the web server. This flaw enables remote code execution, giving attackers full control over the compromised system. With a CVSS score of 7.2 (HIGH) and a FAUCET Risk Score of 91/100, the vulnerability is easily exploitable with low attack complexity and no authentication required for the file upload. While not in the KEV catalog and lacking Metasploit or Nuclei modules, an ExploitDB entry (EDB-20305) confirms the existence of exploit code, though there is no evidence of active exploitation or significant community discussion.