CGI PHP mylog script allows an attacker to read any file on the target server.Referenceshttp://www.securityfocus.com/bid/713http://www.osvdb.org/3396
