RTH - Requirements and Testing Hub

The login code has sql injection which enables anyone to login with any
account which exists at the system. This can be exploited by typing for
example:
admin' OR 'a'='a

to the username. After this it doesn't matter what password you insert. The
sql is evaluated to the format:

SELECT user_id FROM user WHERE username = 'admin' OR 'a'='a' AND
user_password = 'MD5sum of your password'

The bug is at auth_verify_login -function.

Because the sql injection was found at this simple place, you should do
full security related inspection to the code.

My e-mail address is: teme7931@huitsinnevada.info