CVE:CVE-2008-0490
CNNVD:CNNVD-200801-438
WordPress plugin WP-Cal 0.3中的functions/editevent.php中存在SQL注入漏洞。远程攻击者可以借助ID参数，执行任意的SQL命令。
solution:Upgrade wordpress wp_cal_plugin to a higher version than 0.3,and avoid the version 0.3