If you were on a shared server (an insecure one at that) then you could guess (preety simple) someone's directory path to their GForum setup and do anything you want.

Or write a hack that would do it for you, and go in undr the document root so you wouldn't pass the web server's authentication?

- wil