It's really getting ridiculous, the majority of small websites have silly vulnerabilities, this site had default logins for there Administrator account. This taken me less than 10 minuets to have obtained access to all of the accounts and there logs ie Payments, Logs and more...