CVE-2004-1423

This is a vulnerability writeup describing an arbitrary file inclusion flaw in PHP-Calendar <= 0.10.1. The issue allows remote attackers to include arbitrary PHP files via the `phpc_root_path` parameter, potentially leading to remote code execution if PHP globals are enabled.

This exploit demonstrates a remote file inclusion vulnerability in Virtual Law Office's phpcalendar component. The vulnerability allows an attacker to include arbitrary remote files via the `phpc_root_path` parameter, leading to potential remote code execution.