CVE:CVE-2007-3627
CNNVD:CNNVD-200707-122
PHP Lite Calendar Express 2.2版本中存在多个SQL注入漏洞。远程攻击者可以借助对(1)login.php,(2)auth.php,和(3)subscribe.php的cid参数，执行任意SQL指令。 注意：month.php,year.php,week.php,和day.php向量已经被CVE-2005-4009所覆盖。
solution:Upgrade php_lite calendar_express to a higher version than 2.2,and avoid the version 2.2