CVE-2006-7055

CVE-2006-7055 describes a PHP remote file inclusion in TotalCalendar 2.30 and earlier. The vulnerability is triggered via the inc_dir parameter in index.php, allowing a remote attacker to cause arbitrary PHP code execution by supplying a URL. This is a separate vector from CVE-2006-1922 and CVE-2...