Improper escaping of output in mod_rewrite in Apache HTTP Server 2.four.59 and before makes it possible for an attacker to map URLs to filesystem destinations which have been permitted to get served with the server but usually are not deliberately/straight reachable by any URL, causing code execution or source code https://www.hostscheap.com/apache-support-service