Vendor: G2SOFT (www.g2soft.net)
Version: 6.03 and prior versions must be affected.
About: Via this method remote attacker can bypass login.asp and login as admin.
Level: Critical
How:
SQL query in line 31 of login.asp which is checking username and password did
not sanitized properly.
POST -> http://[site]/[ptdir]/login.asp?username=any&password=' or '1'='1