SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands via the planid parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/59150
http://www.vupen.com/english/advisories/2010/1359