CVE-2007-0860

CVE-2007-0860 affects local Calendar System 1.1 with multiple PHP remote file inclusion flaws. An attacker can cause arbitrary PHP code execution by supplying a URL to the TEMPLATE_DIR parameter (for files such as showinvoices.php, showmonth.php, showevents.php, retrieveinvoice.php, modifyitem.ph...