[thelist] Request to a page shows the page's code rather than it's contents...

[Andres Mercader]

Hi list,
By mistake I discovered this "behaviour" in a website in our intranet:
a "normal" url would be something like http://mysite/songs/ which 
would load in the browser the index.cfm page for the songs.

However if I type something like http://mysite/songs/;/anypage.cfm
I get the full source code of the index.cfm page of the songs section,
even if anypage.cfm doesn't even exist.

Why is this? I assume it's some kind of Apache mis-configuration but
can't figure out exactly what is wrong. This is the entry for that
particular website in the Apache httpd.conf file:

<VirtualHost *:80>

 ServerName mysite

 DocumentRoot "/var/www/mysite/httpdocs"

 #ScriptAlias /cgi-bin/ "/var/www/mysite/cgi-bin/"
 
 ErrorLog  "logs/mysite/error_log"
 CustomLog "logs/mysite/access_log" combined

<Directory "/var/www/mysite/httpdocs">
  Options FollowSymLinks
  AllowOverride None
  Allow from all
  Order allow,deny
</Directory>

#<Directory "/var/www/mysite/cgi-bin">
#  Options ExecCGI
#  AllowOverride None
#  Allow from all
#  Order allow,deny
#</Directory>

Alias /includes/ "/var/www/mysite/includes/"

<Directory "/var/www/mysite/includes">
  Options FollowSymLinks
  AllowOverride None
  Deny from all
  Order deny,allow
</Directory>

Alias /files/ "/var/www/mysite/files/"

<Directory "/var/www/mysite/files">
  Options FollowSymLinks
  AllowOverride None
  Deny from all
  Order deny,allow
</Directory>

<Location "/siteadmin">
  AuthType Basic
  AuthName "mysite"
  AuthUserFile "/var/www/mysite/pwd/passwords"
  Require valid-user
</Location>

</VirtualHost>

Thanks