what will the following url produce in unpatched IIS server