In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks.
CWE-89