CVE:CVE-2006-3094
CNNVD:CNNVD-200606-351
Calendarix Basic 存在多个SQL注入漏洞。禁用magic_quotes_gpc时，远程攻击者可以借助 (1) cal_event.php和(2) cal_popup.php中的id参数，执行任意SQL命令。
solution:Upgrade vincent_hor calendarix_basic to a higher version than 0.7.2006-04-01,and avoid the version (,0.7.2006-04-01]