scan the website for an admin login with this:
You must login or register to view this content.
Use the admin login that the website found. (if it did find one)
to see if it is vulnerable, as the user type: '
as the password type: =
if it brings you to an error page, that means its vulnerable, and follow the steps below. If it says invalid login, or anything similar, its not vulnerable and do no follow these steps.
Steps:
As the username for the login type: admin
as the password type: 'or'=" (type it exactly as I did. the whole word)
It should let you in.