exploit-db-mirror/platforms/php/webapps/31908.txt
Offensive Security 8333e34e85 Updated 02_27_2014
2014-02-27 04:27:50 +00:00

12 lines
579 B
Text
Executable file

source: http://www.securityfocus.com/bid/29662/info
Flat Calendar is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks.
An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes to its configuration. This may lead to further attacks.
Flat Calendar 1.1 is vulnerable; other versions may also be affected.
http://www.example.com/calender_path/admin/add.php
http://www.example.com/calender_path/admin/deleteEvent.php?eventNumber=[EVENTNUMBERid]