By providing a username and the password as ' or 1=1;-- you are able to gain access as any user that exists, and from that you can give yourself an account with any privileges you would like.
Not sure if you have to enter exactly 'or 1=1'.
Seems that you have access if you know the username only. You can use any passwort you want to login.
Log in to post a comment.
Sign up for the SourceForge newsletter:
You seem to have CSS turned off.
Please don't fill out this field.