info
discussion
exploit
solution
references
RETIRED: Intesync LLC Miniweb 2.0 'username' Parameter SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following example input is available:
username: 'union select 1#
Privacy Statement
Copyright 2010, SecurityFocus