CVE-2008-6103: PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magic_quotes_gpc is dis...

Security readout for executives and security teams

CVE-2008-6103 is an old PHP remote file inclusion issue in A4Desk Event Calendar. If a vulnerable site exposes index.php with the documented PHP setting condition, an attacker could cause the application to run attacker-supplied PHP code. The source bundle does not identify affected versions or a vendor patch. Exposure is most likely in legacy, internet-facing PHP sites still running A4Desk Event Calendar. The affected version range is not stated, so teams must verify product presence and configuration directly. Prioritize discovery and retirement of this software if it is still present. The vulnerability enables code execution, but the evidence is old and incomplete, so urgency depends on confirmed deployment. Mitigation focus: Identify whether A4Desk Event Calendar is deployed on any public or internal PHP site.; Check vendor, Secunia, SecurityFocus, or IBM X-Force guidance for fixed versions or workarounds.; Remove, replace, or isolate the calendar if no supported fix is available..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.