Description The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. Remediation References CVE-1999-0738 Related Vulnerabilities Oracle Database Server CVE-2014-4290 Vulnerability (CVE-2014-4290) Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3704) WordPress Plugin Sendit WP Newsletter 'id' Parameter SQL Injection (2.1.0) WordPress Plugin Restaurant Menu-Food Ordering System-Table Reservation Cross-Site Request Forgery (2.3.1) WordPress Plugin Download Manager Arbitrary File Deletion (3.2.50) Severity Medium Classification CVE-1999-0738 Tags Missing Update Known Vulnerabilities