Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters.
https://github.com/rickxy/Student-Attendance-Management-System
https://gist.github.com/celbahraoui/4300aa8eb79e99f2c481cfb3a49a0cd9