info
discussion
exploit
solution
references
Alisveristr E-commerce Login Multiple SQL Injection Vulnerabilities
No exploit is required.
The following example is available:
Username : ' or ''='
Password : ' or ''='
Privacy Statement
Copyright 2010, SecurityFocus