CVE:CVE-2006-3684
CNNVD:CNNVD-200607-341
SoftComplex PHP Event Calendar 1.4中的calendar.php 存在PHP远程文件包含漏洞。 远程攻击者可以借助path_to_calendar参数中的URL，从extract函数调用中重写$path_to_calendar变量，从而执行任意PHP代码。
solution:Upgrade softcomplex php_event_calendar to a higher version than 1.4,and avoid the version 1.4