Description
init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter.
References
- 20041109 Multiple Vulnerabilities in WebCalendar mailing-list
- 11651 vdb-entry
- webcalendar-init-file-include(18028) vdb-entry
- 13164 third-party-advisory