#2 SQL Injection

[billy anzovino]

By providing a username and the password as ' or 1=1;-- you are able to gain access as any user that exists, and from that you can give yourself an account with any privileges you would like.

[Nobody/Anonymous]

Not sure if you have to enter exactly 'or 1=1'.
Seems that you have access if you know the username only. You can use any passwort you want to login.