Cosmetics and Beauty Product Online Store version 1.0 suffers from a remote SQL injection vulnerability.