CVE-2008-6634: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idroom parameter to weekview.php...