Why do companies not lock down their web servers?!

[gregmcc]

Eg: http://www.galaxyandco.co.za/test

So they are running IIS7 and the website is installed on C:\Inetpub\

http://www.galaxyandco.co.za/shop_products.asp?Cat1ID=test


It's only a few steps away from being pwned!

 

[Frikkenator]

Lol, that last one is ripe for SQL injection!

 

[twicode]

Classic asp. Still shows you how many sites run on old tech.


Also VBScript error
http://www.galaxyandco.co.za/shop_products.asp?Cat1ID=46

Microsoft VBScript runtime error '800a005e'

Invalid use of Null: 'Cint'

/shop_products.asp, line 283

 

[koeksGHT]

Bad developers..

 

[Brenden_E]

I emailed the marketing person about it, hopefully it gets plugged soon.