This indicates an attempt to exploit a PHP remote file inclusion vulnerability in ActiveCalendar.
The vulnerability is due to an input validation error in the "data/showcode.php" script. The script does not validate the "page" parameter before it is passed to an "fread()" call. This can be exploited by remote attackers to disclose the contents of arbitrary files.
Active Calendar 1.2
Apply the latest update from the vendor: