Search/CVE-1999-1180
● CVE

CVE-1999-1180

VendororeillyProductwebsite, website proDiscoveredFeb 16, 1999UpdatedApr 16, 2026

O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2) args.bat.

CVSS v3.1
—
EPSS
1.68%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 15, 2026
▼ 0.01pp
1.69% → 1.68% over 2 tracked changes
Connections
2 relationships
Timeline
disclosure → media coverage
Feb 16, 1999
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026