LiveCart 'id' parameter SQL injection vulnerability has been fixed in the recent LiveCart 1.1.2 release.
Original vulnerability reference: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1750
LiveCart 1.1.2 release announcement: http://livecart.com/news/LiveCart-1-1-2-released.12
-- Best regards, Rinalds Uzkalns UAB Integry Systems