QuickEStore CSRF SQL Mayhem.

This exploit is small but pretty interesting, because it is actually a very beautiful CSRF example in all it's simplicity. Yes, they use CF tokens, but tokens that are guessable. It's not only CSRFable but also is vulnerable to SQL injection. Just imagine 100 vulnerable sites being loaded into one website and orchestrated as one big CSRF SQL injecting symphony on behalf of your IP. Sounds strange? Beautiful, It takes two to tango ^^