RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving (1) "." (dot), (2) space, and (3) "/" (slash) characters.
https://exchange.xforce.ibmcloud.com/vulnerabilities/25037
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0952
http://www.vupen.com/english/advisories/2006/0807
http://www.securityfocus.com/bid/16934