CVE:CVE-2004-1507
CNNVD:CNNVD-200412-994
WebCalendar的login.php存在CRLF注入漏洞。远程攻击者通过return_path参数和执行HTTP Response Splitting攻击修改服务器中预期的HTML内容，从而注入CRLF序列。
solution:Upgrade webcalendar webcalendar to a higher version than 0.9.8,0.9.11,0.9.15,0.9.16,0.9.19,0.9.20,0.9.21,0.9.22,0.9.23,0.9.24,0.9.25,0.9.26,0.9.27,0.9.28,0.9.29,0.9.30,0.9.31,0.9.32,0.9.33,0.9.34,0.9.35,0.9.36,0.9.37,0.9.38,0.9.39,0.9.40,0.9.41,0.9.42,0.9.43,0.9.44,and avoid the version 0.9.8,0.9.11,0.9.15,0.9.16,0.9.19,0.9.20,0.9.21,0.9.22,0.9.23,0.9.24,0.9.25,0.9.26,0.9.27,0.9.28,0.9.29,0.9.30,0.9.31,0.9.32,0.9.33,0.9.34,0.9.35,0.9.36,0.9.37,0.9.38,0.9.39,0.9.40,0.9.41,0.9.42,0.9.43,0.9.44