CVE-2004-1787
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.
Date published : 2005-05-10
http://www.securityfocus.com/bid/9372
http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2537