CVE-2018-18804: Improper Neutralization of Special Elements used in an SQL Command

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...