PHP iCalendar versions 2.0.1, 2.1, and 2.2 suffer from a file inclusion vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43684/EV0070.txt
Source: https://packetstormsecurity.com/files/43684/EV0070.txt.html