Code injection

download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via 1 a trailing ".", 2 a trailing space, or 3 mixed case in the FileNameAttach parameter...

PT-2011-3226

Name of the Vulnerable Software and Affected Versions Douran Portal version 3.9.7.8 Description The issue allows remote attackers to obtain the source code of arbitrary files under the web root. This can be achieved through the "download.aspx" page by manipulating the FileNameAttach parameter wit...

CVE-2011-1569: Exposure of Sensitive Information to an Unauthorized Actor

download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via 1 a trailing ".", 2 a trailing space, or 3 mixed case in the FileNameAttach parameter...