bingbing - 7:11 am on Sep 29, 2012 (gmt 0)

So you are saying that Bing does "guess" URLs?

I know the directory is irrelevant, once found, but finding all sorts of template names that we have never been published is very suspicious. How did it make the leap to filenames that are quite long and look_like_this.ext etc and also even pass valid CGI params?

Perhaps, as you say, someone has posted some links publically somewhere? But why is only Microsoft calling those links in that case?