A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the use…

A SQL injection vulnerability exists in CodeAstro Simple Attendance Management System v1.0 that allows remote unauthenticated attackers to bypass authentication. The vulnerability is located in the username parameter of the index.php file. Attackers can exploit this flaw without authentication to gain unauthorized access to the system. This represents a critical security issue as it allows complete authentication bypass through SQL injection techniques.