It should be possible to remove / change url to random string the diagnostics page. Although it presents no real problems, if allows a remote attacker/spammer to profile the server for mod_httpbl.
Log in to post a comment.
