Online Course Registration version 1.0 suffers from a blind boolean-based remote SQL injection vulnerability.