E-Smart Cart SQL Injection

Software: E-Smart Card
Vendor link: http://www.hostnomi.com/cart.htm
Attack: SQL Injection (admin bypass)

Discovered by: David Sopas Ferreira a.k.a SmOk3 < smok3f00 at gmail.com >

SQL Injection
-------------
An attacker may execute arbitrary SQL statements on the vulnerable system. This may compromise the integrity of your database and/or expose sensitive information. Vulnerable file is embadmin/login.asp, and a malicious user can bypass administration login.

Proof of Concept:
embadmin/login.asp

user: 'or''='
pass: 'or''='


Solution:

Your script should filter metacharacters from user input.

Vendor:

Contacted and waiting for reply.