2005-02-19 10:00:00
mitre
PUBLISHED
init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter.