School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php.