CVE:CVE-2008-0937
CNNVD:CNNVD-200802-445
XOOPS 的Tiny Event (tinyevent)模块的index.php中存在SQL注入漏洞。远程攻击者可以利用一个print操作中的id参数来执行任意SQL命令，该漏洞不同于CVE-2007-1811。
solution:Upgrade tinyevent tinyevent to a higher version than 1.01,and avoid the version 1.01; Upgrade xoops tiny_event_module to a higher version than 1.01,and avoid the version 1.01