CVE-2006-3556: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...