title: Magento possible SQL injection?
body: <p>I've been having a few random search queries coming up in the popular search terms on a Magento site, the site has also been up and down like a Yo-Yo recently.</p>
  
  <p>Could anyone shed some light on some, or all, of these search terms;</p>
  
  <pre><code>1)))) and benchmark(100000000,HEX(999999)) --
  
  1 and benchmark(100000000,HEX(999999)) #
  
  x Content-Length: 0 HTTP/1.1 200 OK Content-Type: text/html Content-Length: 18 &lt;html&gt;saint&lt;/html&gt;
  
  saint&lt;!--#echo var="HTTP_USER_AGENT"--&gt;
  
  1 waitfor delay '0:0:6' /*
  
  x;id|
  
  &lt;script&gt;alert('SAINTL2NhdGFsb2dzZWFyY2gvcmVzdWx0L2luZGV4LyBx')&lt;/script&gt;
  
  christmas&lt;script&gt;alert("XSS");&lt;/script&gt;
  </code></pre>