Online Shopping System Advanced version 1.0 suffers from multiple remote SQL injection vulnerabilities.