Comment by apple4ever

Sounds like you didn't prove its vulnerable against a stock PHP server though, so that's not a great response.