PCI Compliance Problems with sql string

[Guest jrod101]

Hello,

We have Mcaffee doing PCI compliance checks on our site, to make a long story short this is the errors we're getting:

MySQL Error Occurred

Error Message:

1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ';#(1234567890*27)#'' at line 1

SQL:

SELECT id FROM CubeCart_search WHERE searchstr='"'>#(1234567890

The error is being reported from the index.php file.

Here are my specs:

Cubecart version: 4.3.3

PHP Version: 5.2.10

MySQL Version: 5.0.45

Please help!?!