------------------------------------------- Admin Bypass In Jax Calendar v1.0 - v1.34 By SonnySpooks ------------------------------------------- 1. [About App] ------------------------------------------- Jax Calendar is a popular calendar app used on Various sites. ------------------------------------------- 2. [Issue With It] The /admin directory requires no Login or Verification ------------------------------------------- 3. [Replication of attack] ------------------------------------------- http://www.salikum.de/modul/news/admin/?language=english http://www.bikersmechanic.de/apportal-3/calendar/admin/?language=english ------------------------------------------- ________ /\ \ / \ \ / \ \ / \_______\ \ / / ___\ / ____/___ /\ \ / /\ \ / \ \/___/ \ \ / \ \ \ \ / \_______\ \_______\ \ / / / / \ / / / / \ / /\ / / \/_______/ \/_______/ -------------------------------------------