CVE-2004-1423: Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in C...

Security readout for executives and security teams

This is an old remote file inclusion issue in Sean Proctor PHP-Calendar before 0.10.1, including deployments embedded in Virtual Law Office. A remote attacker could make vulnerable PHP files load attacker-controlled PHP code, creating potential server compromise if exposed. Exposure is most likely in legacy PHP-Calendar installations before 0.10.1 or products bundling that code, specifically including Commonwealth of Massachusetts Virtual Law Office according to the CVE description. Prioritize remediation if any affected code is internet-facing. The vulnerability can lead to remote server-side code execution, but current exploitation is not confirmed in the supplied sources. Mitigation focus: Inventory PHP-Calendar and bundled copies in public web roots.; Upgrade or remove PHP-Calendar versions before 0.10.1.; Check vendor guidance for Virtual Law Office or other bundled products..

Prepared

Jun 30, 2026, 00:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.