CVE:CVE-2008-1954
CNNVD:CNNVD-200804-368
Web Calendar Pro 4.1及其早期版本的one_day.php存在SQL注入漏洞。远程攻击者通过user_id参数来执行任意SQL命令。
solution:Upgrade webcalendar web_calendar_pro to a higher version than 4.1,4.0,and avoid the version (,4.1],4.0