EgavilanMedia User Registration and Login System with Admin Panel versions released prior to November 17, 2020 appear susceptible to a remote SQL injection vulnerability that allows for authentication bypass.
e4fbd540517e3cf7beb6ea65e4d2d75c6223437aecd7d185ac2b46917677d64a