Abarcar Manufacturer System Script suffers from remote and blind SQL injection vulnerabilities in plistings.php.