nice search for sql-queries (and injection-possibilities)
select\s.+from\s.+where lang:jsp

1st hit is
---snip---
where products.subjectid = " + request.getParameter("BrowseSubjectID");
---snap---

*going to look further*