Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.