info
discussion
exploit
solution
references
Cool Cafe Chat LOGIN.ASP SQL Injection Vulnerability
An exploit is not required.
The following proof of concept is available:
user: admin
password: 'or'
Privacy Statement
Copyright 2010, SecurityFocus