PHP Booking Calendar version 10d remote SQL injection exploit that retrieves the administrator login and password hash.