By:BoNy-m
BoNy-m@hotmail.com
----------------------

example:-
/popup/calendar_year.php?rental_id=[SQL Injection]