You are using cgi or fastcgi and you have not set cgi.fix_pathinfo=1 in php.ini.
         Flyspray cannot work properly without cgi.fix_pathinfo enabled, please update your configuration