PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries.
https://github.com/lintian31/vpm-system/blob/main/Vehicle%20parking%20Management%20System.md