IIS 7.5 website application pool with full administrator permissions hackable?
- by Caroline Beltran
Although I would never do this, I would like to know how a static html website with the permission mentioned in the title could be compromised.
In my humble opinion, I would guess that this would pose no threat since a web visitor has no way to upload/edit/delete anything.
What if the site was a simple PHP website that simply displayed ‘hello world’? What if this PHP site had a contact us form that was properly sanitized?
Thank you