medium4.3Public exploit code
CVE-2007-6214
Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LearnLoop 2.0beta7 - 'sFilePath' Remote File Disclosure2007-11-29 · webapps · php · Verified
Impact
Directory traversal vulnerability in include/file_download.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a .. (dot dot) in the sFilePath parameter. NOTE: exploitation requires that the product is configured, but has zero files in the database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Learnloop | Learnloop | Version 2.0_beta7 |