Joomla OSG Courts Reservation extension version 1.4.9 suffers from a remote SQL injection vulnerability.