Price Comparing Site

Price comparing site.

Main feature search from text (Search page), Product detail page.

This app have SQL injection vulnerability

http://www.pricealmanac.com/index.php?r=product/detail&searchupc=008526'97001484&searchdata=&Zip=&template=