Path traversal

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...