Detailed analysis of security vulnerabilities
IIS has the #exec function enabled for Server Side Include (SSI) files.