CVE ID:	CVE-2011-1569
Description:	download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via (1) a trailing ".", (2) a trailing space, or (3) mixed case in the FileNameAttach parameter.
Test IDs:	1.3.6.1.4.1.25623.1.0.103120
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1569 BugTraq ID: 46927 http://www.securityfocus.com/bid/46927 Bugtraq: 20110320 Douran Portal File Download/Source Code Disclosure Vulnerability (Google Search) http://www.securityfocus.com/archive/1/517085/100/0/threaded http://www.exploit-db.com/exploits/17011 http://soroush.secproject.com/blog/2011/01/unrestricted_file_download_v1_0/ http://osvdb.org/71250 http://secunia.com/advisories/43792 http://securityreason.com/securityalert/8180 XForce ISS Database: douranportal-download-file-download(66177) https://exchange.xforce.ibmcloud.com/vulnerabilities/66177