Global Multi School Management System Express version 1.0 suffers from a remote SQL injection vulnerability.