/hvaonline/posts/list/13.html JForum - http://www.jforum.net /hotplugcms/administration/tblcontent is very easy with ' OR 1=1 /* and a SQL-inject will bypass the entire authentication process. Typical, very simple SQL Injection. peda ]]> /hvaonline/posts/list/93.html#390 /hvaonline/posts/list/93.html#390 GMT