trzindan@xxxxxxxxxx wrote: > local Calendar System v1.1 (lcStdLib.inc) Remote File Include Fake vuln > code : The variables are set in config.php > exploit: You never tested them. Which is pretty lame. Stefano