Get Demo
admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter.