Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter.