CVE-2011-1569: Douran Portal

Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days.

download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via (1) a trailing ".", (2) a trailing space, or (3) mixed case in the FileNameAttach parameter.

Affected products

• Douran Portal: version 3.9.7.8 only

Published 2011-04-05. Last modified 2026-06-16.