CVE:CVE-2005-1865
CNNVD:CNNVD-200506-075
Calendarix Advanced 1.5中存在多个SQL注入漏洞，远程攻击者可通过：(1)提交到cal_week.php脚本，(2)cal_cat.php脚本，或(3)到cal_day.php脚本的catview参数，或(4)到cal_pophols.php脚本的id参数，来执行任意SQL指令。
solution:Upgrade vincent_hor calendarix_advanced to a higher version than 1.5,and avoid the version 1.5