Secunia

A vulnerability has been identified in bttlxeForum, which can be exploited by a malicious person to gain full control over the application.

The vulnerability is caused due to an input validation error in "Login.asp". A malicious person can use a classic SQL injection technique to bypass the user authentication by inputting nothing in the user field and the following in the password field when logging in:

'or''='

All versions prior to 2.0.publicbeta.3.pr have been reported vulnerable.

Solution
Install version 2.0.publicbeta.3.pr, or apply the changes as detailed at the web page linked to in the "Other References" section.
Further details available in Customer Area

Provided and/or discovered by
SAUDI_DEFACERZ

Original Advisory
http://securitytracker.com/alerts/2003/Apr/1006632.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area