MyBloggie 2.1.3beta null char + SQL Injection -> Login Bypass
MyBloggie 2.1.3beta null char + SQL Injection - Login Bypass software: site: http://www.mywebland.com/ vulnerability: if magic quotes off - SQL INJECTION look carefully this code in login.php, line 40-69 ... if isset$POST'username' $username=$POST'username'; else $username=""; if isset$POST'passw...