TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL.Referenceshttp://www.osvdb.org/6517http://www.securityfocus.com/bid/10445/infohttp://secunia.com/advisories/11731http://securitytracker.com/alerts/2004/May/1010346.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/16275