Penglead version 2.0 suffers from a remote SQL Injection vulnerability that allows for authentication bypass.