Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 24/06/2008 Updated: 29/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote malicious users to upload and execute arbitrary code via the FILE1 parameter in an uploadfileprocess action, probably followed by a direct request to the file in calendar/eventimages/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fullrevolution aspwebcalendar2008

Title:AspWebCalendar 2008 Remote File Upload Vulnerability # Discovered by : Alemin_Krali # Dork :calendarasp?eventdetail [sitecom]/path/calendar_adminasp?action=uploadfile ==>>> upload your Asp shell [sitecom]/path/calendar/eventimages/yourshellasp ==>>> your address upload form <FORM ENCTYPE='multip ...

CWE-94 http://downloads.securityfocus.com/vulnerabilities/exploits/29795.html http://www.securityfocus.com/bid/29795 https://exchange.xforce.ibmcloud.com/vulnerabilities/43201 https://www.exploit-db.com/exploits/5850 https://nvd.nist.gov https://www.exploit-db.com/exploits/5850/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-2832

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect