HighPlus CMS version 0.1.3 suffers from a remote SQL injection vulnerability that allows for authentication bypass.