The Zone-H Security Team has discovered a SQL injection flaw in Infinity WEB that allows malicious attackers to bypass the authentication mechanism without having an account.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33659/ZH2004-14SA.txt
Source: https://packetstormsecurity.com/files/33659/ZH2004-14SA.txt.html