Early Access — Mondoo Vulnerability Intelligence is currently in preview.
WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root.
Exploitability
AV:NAC:LAu:NImpact
C:PI:NA:N5/AV:N/AC:L/Au:N/C:P/I:N/A:N