Hack admin user!
First we open that web page
Click on Menu (≡), then choose Login
Now, try Sql Injection
Let's give the input, like below
username = ' or ''='
' or ''='
password = ' or ''='
Then the profile page show up
We got flag!