[37701] in bugtraq
ASP Calendar Vulnerability
daemon@ATHENA.MIT.EDU (ali reza AcTiOnSpIdEr)
Tue Dec 14 13:28:00 2004
Date: 14 Dec 2004 10:59:57 -0000
Message-ID: <20041214105957.31296.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: ali reza AcTiOnSpIdEr <actionspider@gmail.com>
To: bugtraq@securityfocus.com
<< www.ashiyane.com >>
Release by AcTiOnSpIdEr
AcTiOnSpIdEr@gmail.com
Advisory Name: ASP Calendar Vulnerability
Release Date:13 December 2004
Platform:Any website using asp Calendar
Severity:no password protected !
Overview :
----------
ASP Calendar is a tool written in aps to handle the administration page(( Control Panel ))
you can in this control panel Add Event View/EditEvents
Add Category View Categories
Vulnerability :
---------------
control panel in asp clendar no protcted wiht password
you can go this page wiht url !
exampel:
www.victem.com/***/admin/main.asp
*** : dirctory that asp cleander is instaling
you can find it to search in google <admin/main.asp>
tanQ
and bye;)
