SQL injection vulnerability allowing login bypass