Simple Student Attendance System version 1.0 suffers from multiple remote SQL injection vulnerabilities.