Improper escaping of output in mod_rewrite in Apache HTTP Server two.four.59 and earlier will allow an attacker to map URLs to filesystem places which might be permitted to get served through the server but usually are not intentionally/directly reachable by any URL, leading to code execution or source code disclosure. https://www.hostscheap.com/apache-support-service