Clinical Browsing System login.php Boolean SQLi

There is a Boolean SQL injection vulnerability in the login of clinical browsing system. Through this vulnerability, an attacker can directly log in to the system using the universal password such like "1'or 1='1", and even obtain sensitive information in the database through Boolean blind injection.