EDB-4680webappsphpПРОВЕРЕНО

LearnLoop 2.0beta7 - 'sFilePath' Remote File Disclosure

GoLd_M11/29/2007

Посмотреть на Exploit-DB Посмотреть код на GitLab

ИИ-АнализНа базе ИИ

Код эксплойта

Exploit code not available in database

Посмотреть код на GitLab

Связанные CVE (1)

CVE-2007-6214

NONE

Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a .. (dot dot) in the sFilePath parameter. NOTE: exploitation

Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a .. (dot dot) in the sFilePath parameter. NOTE: exploitation...

12/4/2007CWE-22