CVE-2020-10218: Improper Neutralization of Special Elements used in an SQL Command

A Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php/holidaygroups/add id parameter because of the HolidaydatesController.php addAction function...