change little bit in variable which is parameter. You should add like
@dateFrom
string DateFrom, DateTo
cmd.Parameters.AddWithValue("@dateFrom", DateFrom);
SqlDataReader dr = cmd.ExecuteReader();
while (dr.Read())
{
DateFrom= dr["DateFrom"].ToString();
DateTo= dr["DateTo"].ToString();