vAuthenticate version 3.0.1 suffers from an authentication bypass vulnerability when using SQL injection inside of a cookie.