MetaCart e-Shop [multiples injection sql (get & post)]

vendor site:http://metalinks.com/ product:MetaCart e-Shop bug:injection sql risk:medium injection sql get : http://site.com/metacart/productsByCategory.asp?intCatalogID='sql http://site.com/metacart/product.asp?intProdID='sql injection sqlpost : 1 http://site.com/metacart/searchAction.asp variabl...