BTW, one of the first very popular vulnerabilities of IIS involved making it serve a file&#x27;s source code rather than executing it (a very convenient way to get database login credentials) through a ::$DATA appended to the URL.