Portcullis Security Advisory – Emotion MediaPartner Web Server versions 5.0 and 5.1 have a flaw where the source of a bhtml file can be displayed with a period or plus sign are added to the request.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35663/PSA05-004.txt
Source: https://packetstormsecurity.com/files/35663/PSA05-004.txt.html