Saturday, September 27, 2014

Info disclosed by Web Server

The following is an error message shown from Mazda web site.  From this you know a whole lot of stuff .... should you keep these info quietly you could quietly start hack into their site ...

you know exactly the path they use, the naming convention etc.

Like wise, you properly observe they are using a Content Management System to implement a membership !?  Perhaps you could approach them with a CRM instead ?

Anyway, the purpose of this article is to show you how dangerous it could be when you leave a web server settings to default and you simple use components that you are not fully aware of their faults handling mechanism.

Server Error in '/' Application.

Configuration Error

Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: Thread was being aborted.

Source Error:


Line 65:       
Line 66:         
Line 67:         
Line 68:       
Line 69:     

Source File: D:\Inetpub\mazda.com.my\web\web.config    Line: 67


Version Information: Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.0.30319.17929Line 65:
Line 66:         
Line 67:         
Line 68:       
Line 69:

No comments:

Related Posts Plugin for WordPress, Blogger...