Vulnerability in Analog 3.0 and previous versions allows remote malicious users to read arbitrary files via the forms interface.
stephen turner analog