CVE:CVE-2006-1907
CNNVD:CNNVD-200604-346
myEvent 1.x存在多个SQL注入漏洞。这使得远程攻击者可以借助于传递到(1) addevent.php或(2)del.php中的event_id参数或传递到addevent.php中的(3) event_desc参数注入任意SQL命令。
solution:Upgrade mywebland myevent to a higher version than 1.2,and avoid the version (,1.2]