4 matches found
Sql injection
HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...