DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable.
https://exchange.xforce.ibmcloud.com/vulnerabilities/5533
http://www.dcscripts.com/dcforum/dcfNews/124.html#1
http://archives.neohapsis.com/archives/bugtraq/2000-11/0218.html