SQL injection vulnerability in RoomPHPlanning 1.5 allows remote malicious users to execute arbitrary SQL commands via the idroom parameter to weekview.php.
beaussier roomphplanning 1.5