most probably their script is at first level i guess and one who had developed it didnt consider the fact of sql injection.
although this is welcome sign but this had been in pakistan before, main issue is how they are going to get paid and who would ensure the product delivered is right and dispute resolution.
also based on my experience most of the stuff that would be sold there would be mobiles.
i did check their documentation sometime back but didnt find any specifics, may be need to look in details .
also irony is there are adult ads running on that site as well, through adengage.
http://clicks.adengage.com/clicks/goto.cfm?m=7695690676576|0|38699|7277618135317|143013821945|516805154|501113|0&furl=http://www.vois.com/splash