Description
Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that ends in certain illegal characters such as ">", which causes a different filename to be processed and served.
Remediation
References
Related Vulnerabilities
WordPress Plugin JetWidgets for Elementor and WooCommerce Local File Inclusion (1.1.7)
Dotclear Other Vulnerability (CVE-2007-1989)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4593)
WordPress Plugin Double Opt-In for Download SQL Injection (2.0.8)
WordPress Plugin Xorbin Analog Flash Clock Cross-Site Scripting (1.0)