Exploit : ExtCalendar2 FROM Auth Bypass/Cookie 2 RCE

Sallam All :)

Some days ago i find a bug in php script named ( ExtCalendar2 )

bug is Auth Bypass/Cookie (SQL Injection)

i write a exploit as Remote Command Execution :d

Exploit on Security Sites :

http://www.exploit-db.com/exploits/17562/

http://1337day.com/exploits/16554

there a video to :))

Script Plane with bugs

SQL injection (GET) : http://1337day.com/exploits/15295 (By me :> )

SQL injection (POST) : http://www.exploit-db.com/exploits/17321/ ( By High-Tech Bridge SA )

Sallam :))