Where does IIS keep user account information ( login and password )? Does IIS keep the information in the Windows SAM file? Is there a way to prevent hackers from getting it?
I have heard IIS is vulnerable against hackers to gain access to account information and is a popular way for hackers to hack servers. Is this true?