Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter.