Description IIS has the #exec function enabled for Server Side Include (SSI) files. References https://www.cve.org/CVERecord?id=CVE-1999-0561