CVE:CVE-2006-0673
CNNVD:CNNVD-200602-171
Magic Calendar Lite 1.02的cms/index.php中存在多个SQL注入漏洞。在禁用magic_quotes_gpc的情况下，远程攻击者可以借助(1) $total_login和(2) $total_password参数执行任意SQL命令。
solution:Upgrade reamday_enterprises magic_calendar_lite to a higher version than 1.02,and avoid the version 1.02