Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request" parameter in admin/fetch_gendercs.php.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')