[joni1n3r]

Hello im try to access a site with extension .aspx but i get a really really strange error, i got a status error 500 "Internal Server Error", but the website display a object moved?


<title>Document moved</title>

Object Moved
This document may be found here



What are really happening in the backend? is this can implicate a security breach? or is just a bad error implementation?

thankz

[frank3nstien]

Hello im try to access a site with extension .aspx but i get a really really strangeerror_, i got a status _error 500 "Internal Servererror_", but the website display a object moved?


<title>Document moved</title>

Object Moved
This document may be found here



What are really happening in the backend? is this can implicate a security breach? or is just a bad _error implementation?

thankz

I think that problem is that your web-service is in the same web application with your Sharepoint or website
In this case website intercepts the request handle from IIS and try to resolve it by himself. But it can't do it, and redirects you to its default page or error page

[joni1n3r]

I think that problem is that your web-service is in the same web application with your Sharepoint or website
In this case website intercepts the request handle from IIS and try to resolve it by himself. But it can't do it, and redirects you to its default page orerror page

So in this scenario IIS is trying to resolve and give the error 500, and the web-service give the redirect? Is posible to exploit in any way?