Multiple information disclosure and possible SQL injection vulnerabilities have been discovered in iGeneric eShop 1.2.