Sql injection

CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action...