Find real vulnerabilities before they ship
Vulnerability Database › CVE-1999-0450
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe).