CVE:CVE-2009-4337
CNNVD:CNNVD-200912-237
TYPO3是基于PHP4/PHP5+MySql的开源内容管理系统和内容管理框架。 
TYPO3的Portsmouth Calendar (pd_calendar)扩展组件的Diocese模块存在SQL注入漏洞。远程攻击者可以借助未明向量，导致执行任意SQL指令。
solution:Upgrade simon_rundell pd_calendar_today to a higher version than 0.4.1,0.0.3,and avoid the version (,0.4.1],0.0.3