Medcom LTD CMS Cross Site Scripting / SQL Injection

Exploit Title:Medcom LTD cms sql Injction Vulnerability Google Dork: Intext:" Powered by Medcom LTD" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://medcom.com.hk Tested on: all ================================== + Species & CommonName parametrs in search.asp are...