незнаю уязвимость или нет но по крайней мере ругается:
http://norieltor.ru/search/offer=1&p=3&o=2&r=4,3&c1=0&c2=0&s=1&v=1&page=1

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''2'' and `komnati` IN (4,3) and UNIX_TIMESTAMP(datetime_post) > 1266424935 ORDER' at line 1

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '',3) and UNIX_TIMESTAMP(datetime_post) > 1266424951 ORDER BY `datetime_post` DES' at line 1

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '') and UNIX_TIMESTAMP(datetime_post) > 1266424972 ORDER BY `datetime_post` DESC' at line 1

ругается вот этот вот кусочек:
&o=2&r=4,3