Secunia Research has discovered a vulnerability in NetworkActiv Web Server, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to a validation error of the filename extension supplied by the user in the URL. This can be exploited to retrieve the source code of script files (e.g. PHP) from the server via specially-crafted requests containing the forward slash character. Version affected: NetworkActiv Web Server 3.5.15. Other versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44314/secunia-NetworkActiv.txt
Source: https://packetstormsecurity.com/files/44314/secunia-NetworkActiv.txt.html