ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.
chronoengine chronoforums 2.0.11