DIY Web CMS multiple security vulnerabilities and repair

DIY Web is a content management system developed using asp. There are multiple security vulnerabilities in DIY Web, which may cause leakage of sensitive information.

[+] Info:
~~~~~~~~~
DIY Web CMS Multiple Vulnerabilities
SQL and XSS in DIY Web CMS
Found by: p0pc0rn 22/2/2011
Web: http://www.mydiyweb.com.my
Dork: intext: "powered by DiyWeb"

[+] Poc:
~~~~~~~~~
Asp? Menuid = [SQL "> http://site.com/template.asp? Menuid = [SQL]
Http://site.com/viewcatalog.asp? Id = [SQL]
Http://site.com/xxx.asp? Id = [SQL]
Http://site.com/diyweb/login.asp? Msg = [XSS] -- login page

[+] Reference:
~~~~~~~~~
Http://www.exploit-db.com/exploits/16205

Fix: filter the above pages