info
discussion
exploit
solution
references
Bit 5 Blog Index.PHP SQL Injection Vulnerability
An exploit is not required.
The following proof of concept is available:
http://www.example.com/admin/index.php
User Name: a' or 1/*
Password: a' or 1/*
Privacy Statement
Copyright 2010, SecurityFocus