CVE:CVE-2007-0687
CNNVD:CNNVD-200702-017
Michelle's L2J Dropcalc 4版本及其早期版本的i-search.php中存在SQL注入漏洞。远程验证用户可以借助itemid参数，执行任意SQL指令。
solution:Upgrade michelle l2j_dropcalc to a higher version than 4,and avoid the version (,4]