Attackers can bypass the login screen without knowing the password by exploiting poorly sanitized input fields.