CVE:CVE-2006-6066
CNNVD:CNNVD-200611-361
Dragon Calendar / Events Listing 2.x存在多个SQL注入漏洞，远程攻击者可通过传给(a)admin_login.asp的(1)用户名或(2)密码参数，传给(b)event_searchdetail.asp的(3)ID参数，或者传给(c)venue_detail.asp的(4)VenueID参数，执行任意SQL命令。
solution:Upgrade dragon_internet events_listing to a higher version than 2.0.01,and avoid the version 2.0.01