CVE-2006-3556

PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Date published : 2006-07-12

http://www.securityfocus.com/bid/18876

http://www.securityfocus.com/bid/19042