PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.