EIP-2026-104774

This exploit demonstrates a time-based blind SQL injection vulnerability in the 'delete_student' function of the Simple Student Attendance System. The vulnerability arises from improper sanitization of the 'id' parameter, allowing an attacker to inject malicious SQL queries.