Quote Originally Posted by Troll
Actually, i learnt a lot Thanks

Is this vulnerability common?
It's common in any web application that checks usernames/passwords against those in a database without filtering input. All it takes is a google search for inurl:login to find potential targets.