SQL injection & XSS IN vbzoom v1.11

Software: vbzoom v1.11 Web Site:http://www.vbzoom.com Versions: V1.11 == SQL Injection == http://www.victem.com/vz/show.php?UserID=1&MainID=1&SubjectID=SQL http://www.victem.com/vz/show.php?UserID=1&MainID=SQL&SubjectID=1 ==== XSS ==== http://www.victem.com/vz/comment.php?UserID='XSS...