|
COMMAND PHP/Apache page source disclosure SYSTEMS AFFECTED Tested on PHP/4.0.4 installed on Win ME running Apache/1.3.20 PROBLEM Bill Q found that PHP/4.0.4 installed on Win ME running Apache/1.3.20 will disclose php source if the url is entered with pounds surrounding the dot. http://server.com/phpfile#.#php Not tested against other PHP/Apache/Windows version. SOLUTION Nothing Yet, as bug is not fully qualified.