SailPlanner version 0.3a suffers from a remote SQL injection vulnerability that allows for authentication bypass.