User Management System version 1 suffers from a remote authenticated blind SQL injection vulnerability.