CVE:CVE-2004-1914
CNNVD:CNNVD-200412-991
如在PHP-Nuke中使用的NukeCalendar 1.1.a版本的modules.php存在SQL注入漏洞。远程攻击者借助eid参数执行任意SQL命令。
solution:Upgrade francisco_burzi php-nuke to a higher version than 8.0_final,and avoid the version 8.0_final; Upgrade shiba-design nukecalendar to a higher version than 1.1.a,and avoid the version 1.1.a