Simple Student Information System v1.0 was discovered to contain a SQL injection vulnerability via add/Student.
CWE-89