CVE-2006-4060: Web-Scripts Visual Events Calendar

High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in calendar.php in Visual Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_dir parameter.

Affected products

• Web-Scripts Visual Events Calendar: version 1.1 only

Published 2006-08-10. Last modified 2026-06-16.