Comment by formerly_proven

Eh, that sounds like it's not a vulnerability at all. Most app server configuration files allow you to load and run arbitrary code.