CVE-2021-46451: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the loadfile function...