CVE:CVE-2008-7146
CNNVD:CNNVD-200909-015
IntraLearn Software IntraLearn 2.1以及4.2.3之前版本允许远程攻击者借助一个对help/1/Instructor/中的(1)Knowledge_Impact_Course.htm，(2)LRN-formatted_Course.htm或(3)Create_Course.htm的直接请求，获得敏感信息。该请求会在出错信息中显示安装路径。
solution:Upgrade intralearn intralearn to a higher version than 4.2,2.1,and avoid the version (,4.2],2.1