School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php