BtiTracker 1.4.1 - Become Admin SQL Injection

BtiTracker 1.4.1 - Become Admin SQL Injection BtiTracker =v1.4.1 Remote SQL Injection Exploit Discovered by: m@ge|ozz - [email protected] Vulnerabitity: Remote Sql Injection / Problem: Any user can be Administrator Website Vendor: http://www.btiteam.org Vulnerable Code accountchange.php: if...