CVE-2017-15978: Improper Neutralization of Special Elements used in an SQL Command

AROX School ERP PHP Script 1.0 allows SQL Injection via the officeadmin/ id parameter...