CVE:CVE-2006-2762
CNNVD:CNNVD-200606-041
WebCalendar 1.0.3中的includes/config.php存在PHP远程文件包含漏洞，远程攻击者可通过在includedir参数中的URL(fopen调用中远程访问它，调用的结果是用来定义user_inc设置，该设置用于include_once调用中)来执行任意PHP代码。
solution:Upgrade webcalendar webcalendar to a higher version than 1.0.3,and avoid the version 1.0.3