BadBlue web server version 2.4 has a local path disclosure vulnerability in phptest.php.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32760/badblue24.txt
Source: https://packetstormsecurity.com/files/32760/badblue24.txt.html