CVE:CVE-2005-3982
CNNVD:CNNVD-200512-056
WebCalendar 1.0.1的layers_toggle.php中存在CRLF注入漏洞。远程攻击者可以通过可重定向URL请求的ret参数，修改HTTP header并进行HTTP响应拆分攻击。
solution:Upgrade webcalendar webcalendar to a higher version than 1.0.1,and avoid the version 1.0.1