[Full-disclosure] Calendar ( Provided by Codewalkers ) - SQL Injection

Silitix silitix at gmail.com
Thu Jun 22 06:12:30 BST 2006


[P]roduit : Calendar
            Provided by Codewalkers

[S]ite officiel : http://Calendar.codewalkers.com

[V]ulnérabilité : SQL Injection

[E]xploitation : /calendar.php?display=event&id=[SQL]

[C]rédit : Silitix - www.Silitix.com

[A]vis de sécurité original : www.Silitix.com/calendar-cws.php

[G]reetz : Simo64 / MSRT / VeNoM630 / CrAsH_oVeR_rIdE ... :)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060622/f7fcf041/attachment.html 


Full-Disclosure is hosted and sponsored by Secunia.