CVE:CVE-2005-4009
CNNVD:CNNVD-200512-090
PHP Lite Calendar Express 2.2及之前版本存在多个SQL注入漏洞。远程攻击者可以借助对(a) day.php， (b) week.php， (c) month.php和(d) year.php的(1) cid和(2) catid 参数，执行任意的SQL指令。
solution:Upgrade php_lite calendar_express to a higher version than 2.0,2.2,and avoid the version 2.0,2.2