CVE:CVE-2007-3519
CNNVD:CNNVD-200707-050
phpEventCalendar 0.2.3版本及其早期版本的eventdisplay.php中存在SQL注入漏洞。远程攻击者可以借助id参数执行任意SQL指令。
solution:Upgrade wesmo phpeventcalendar to a higher version than 0.2.3,and avoid the version (,0.2.3]