Comment by mooism2

No idea.

What is /cgi-bin/phf?

Why do you say it is a vulnerability?

You will probably get better quality answers if you ask on a Q+A site such as Server Fault, and include relevant background information (e.g. answers to my questions above).

http://serverfault.com/questions/ask