Sql injection

Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter...