|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
ASP Calendar Vulnerability <www.ashiyane.com>
From: ali reza AcTiOnSpIdEr (actionspider
gmail.com)
Date: Tue Dec 14 2004 - 04:59:57 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
<< www.ashiyane.com >>
Release by AcTiOnSpIdEr
AcTiOnSpIdErgmail.com
Advisory Name: ASP Calendar Vulnerability
Release Date:13 December 2004
Platform:Any website using asp Calendar
Severity:no password protected !
Overview :
----------
ASP Calendar is a tool written in aps to handle the administration page(( Control Panel ))
you can in this control panel Add Event View/EditEvents
Add Category View Categories
Vulnerability :
---------------
control panel in asp clendar no protcted wiht password
you can go this page wiht url !
exampel:
www.victem.com/***/admin/main.asp
*** : dirctory that asp cleander is instaling
you can find it to search in google <admin/main.asp>
tanQ
and bye;)
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]