CVE:CVE-2005-0474
CNNVD:CNNVD-200503-152
WebCalendar 0.9.45的user.php user_valid_crypt函数中存在SQL注入漏洞，远程攻击者可以通过编码过的webcalendar_session cookie执行任意SQL命令。
solution:Upgrade webcalendar webcalendar to a higher version than 0.9.45,and avoid the version 0.9.45