Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database.
http://archives.neohapsis.com/archives/bugtraq/2000-10/0032.html
http://archives.neohapsis.com/archives/bugtraq/2000-10/0007.html