CVE-2024-42567: Improper Neutralization of Special Elements used in an SQL Command

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...