merhawi023

 [description]
 An issue was discovered in MK-AUTH 19.01. The web login functionality
 allows an attacker to bypass authentication and gain client privileges
 via SQL injection in central/executar_login.php.

 ------------------------------------------

 [Additional Information]
 the script central/executar_login.php had poor sql query construction, 
 that if manipulated results in gaining access without password