Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php.