A SQL injection vulnerability has been identified in CodePanda Source canteen_management_system version 1.0. The vulnerability affects the /api/login.php file where manipulation of the Username parameter leads to SQL injection. The attack can be executed remotely and the exploit has been made public. This represents a significant security risk as authentication bypass vulnerabilities are commonly exploited by attackers.