Allaire JRun 2.3 server allows remote malicious users to obtain source code for executable content by directly calling the SSIFilter servlet.
macromedia jrun 2.3.x