A SQL injection vulnerability exists in CodeAstro Simple Attendance Management System v1.0 that allows remote unauthenticated attackers to bypass authentication. The vulnerability is located in the username parameter of the index.php file. Attackers can exploit this flaw without authentication to gain unauthorized access to the system. This represents a critical security issue as it allows complete authentication bypass through SQL injection techniques.