Total vulnerabilities in the database
BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.
CVSS v2:
No CWE or OWASP classifications available.
No affected software listed.