install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
install/index.php in WebCalendar
Exploit
CVE-2012-1495
NVD
Refer to CVE-2012-1495 NVD advisory