CVE:CVE-2007-3183
CNNVD:CNNVD-200706-429
Calendarix中存在多个SQL注入漏洞。当magic_quotes_gpc被禁用时，远程攻击者可以借助提交到calendar.php的(1)月份和(2)年份参数和到cal_search.php的(3)搜索字符串，执行任意的SQL指令。
solution:Upgrade vincent_hor calendarix to a higher version than 0.7.2007-03-07,and avoid the version 0.7.2007-03-07