CVE:CVE-2008-1346
CNNVD:CNNVD-200803-239
MyioSoft EasyGallery中的staticpages/easygallery/index.php存在SQL注入漏洞。远程攻击者通过一个分类操作中的catid参数来执行任意SQL命令。
solution:Upgrade myiosoft easycalendar to a higher version than 4.0tr,and avoid the version 4.0tr