Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. Referenceshttps://fluidattacks.com/advisories/shierrohttps://github.com/projectworldsofficial/hospital-management-system-in-php/