BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0937