The server in Apple FileMaker prior to 14.0.4 on OS X allows remote malicious users to read PHP source code via unspecified vectors.
apple mac_os_x
filemaker filemaker