The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
NVD-CWE-Other