The exploit basically uploaded the contents of a bunch of sensitive files to some server. Besides uploading the full list of files in the User directory (not the contents of the files) it uploaded the contents of the following files:
Linux:
/etc/passwd,
/etc/hosts,
/etc/hostname,
/etc/issue,
.bash_history,
.mysql_history,
.pgsql_history,
.ssh/known_hosts,
.ssh/authorized_keys,
.ssh/id_sa,
.remmina/.remmina,
.remmina/.pref,
.config/filezilla/.xml,
.filezilla/.xml,
pass.txt,
access.txt,
.sh,
.config/psi+/profiles/default/accounts.xml
Windows (in the User directories AppData/Roaming and Application Data):
Subversion: config, servers, auth/svn.simple/* , auth/svn.simple/* .*
SmartFTP: Client 2.0/Favorites/Quick Connect/* .xml
Psi+: profiles/default/accounts.xml
Notepad++: plugins/config/NppFTP/NppFTP.xml
.purple: accounts.xml
s3browser: * .xml, * .settings
FileZilla: filezilla.xml, sitemanager.xml, recentservers.xml
FTP Explorer: profiles.xml
FTPRush: RushSite.xml
FTPGetter: servers.xml
FTP Now: sites.xml
FTPInfo: ServerList.cfg, ServerList.xml
GHISLER: wcx_ftp.ini
Ipswitch: WS_FTP/Sites/ws_ftp.ini
VanDyke: Config/Sessions/* .ini
Linux: /etc/passwd, /etc/hosts, /etc/hostname, /etc/issue, .bash_history, .mysql_history, .pgsql_history, .ssh/known_hosts, .ssh/authorized_keys, .ssh/id_sa, .remmina/.remmina, .remmina/.pref, .config/filezilla/.xml, .filezilla/.xml, pass.txt, access.txt, .sh, .config/psi+/profiles/default/accounts.xml
Windows (in the User directories AppData/Roaming and Application Data): Subversion: config, servers, auth/svn.simple/* , auth/svn.simple/* .* SmartFTP: Client 2.0/Favorites/Quick Connect/* .xml Psi+: profiles/default/accounts.xml Notepad++: plugins/config/NppFTP/NppFTP.xml .purple: accounts.xml s3browser: * .xml, * .settings FileZilla: filezilla.xml, sitemanager.xml, recentservers.xml FTP Explorer: profiles.xml FTPRush: RushSite.xml FTPGetter: servers.xml FTP Now: sites.xml FTPInfo: ServerList.cfg, ServerList.xml GHISLER: wcx_ftp.ini Ipswitch: WS_FTP/Sites/ws_ftp.ini VanDyke: Config/Sessions/* .ini