18th Dec 2001 [SBWID-4925]
COMMAND
PHP/Apache page source disclosure
SYSTEMS AFFECTED
Tested on PHP/4.0.4 installed on Win ME running Apache/1.3.20
PROBLEM
Bill Q found that PHP/4.0.4 installed on Win ME running Apache/1.3.20
will disclose php source if the url is entered with pounds surrounding
the dot.
http://server.com/phpfile#.#php
Not tested against other PHP/Apache/Windows version.
SOLUTION
Nothing Yet, as bug is not fully qualified.
TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2025 AOH