Car Park Management System version 1.0 suffers a remote SQL injection vulnerability that allows for authentication bypass.