C.COM Events CMS version 0.1.02 suffers from a remote SQL injection vulnerability that allows for login bypass. Continue reading...