Simple E-Learning System search.php SQL Injection Vulnerability

Simple e-Learning System is a simple e-learning system from Carlo Montero’s personal developer. version v1.0 of Simple E-Learning System is vulnerable to a SQL injection vulnerability that stems from the affected file search.php lacking validation of externally entered SQL statements. An attacker could exploit the vulnerability to execute illegal SQL commands to steal sensitive database data.