CVE:CVE-2007-0860
CNNVD:CNNVD-200702-166
local Calendar System 1.1 中的多个 PHP 远程文件存在安全漏洞，允许远程攻击者通过 (1) TEMPLATE_DIR 参数中的 URL 执行任意 PHP 代码到 (a) showinvoices.php, (b) showmonth.php, ( c) showevents.php、(d)retrieveinvoice.php、(e) modifyitem.php和(f)lookup_userid.php；或 (g) editevent.php、(h) resetpassword.php、(i) signup.php、showmonth.php、(j) showday.php、showevents.php 和 lookup_userid.php 的 LIBDIR 参数。
solution:Upgrade laboratory_for_optical_and_computational_instrumentation local_calendar_system to a higher version than 1.1,and avoid the version 1.1