Sql injection

PHPSHE 1.7 allows module/index/cart.php pintuanid SQL Injection to index.php...