CVE:CVE-2004-1654
CNNVD:CNNVD-200409-001
phpWebsite 0.9.3-4及其早期版本的calendar模块存在SQL注入漏洞。远程攻击者借助cal_template执行任意SQL命令。
solution:Upgrade phpwebsite phpwebsite to a higher version than 0.7.3,0.8.2,0.8.3,0.9.3,0.9.3.4,and avoid the version 0.7.3,0.8.2,0.8.3,0.9.3,0.9.3.4