Detailed analysis of security vulnerabilities
BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.