Complaint Management System version 4.2 suffers a remote SQL injection vulnerability that allows for authentication bypass.