Sql injection

SQL injection vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter...