Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine.
CVSS Metrics
