Error Label 9System.Data.SqlClient.SqlException: Syntax error occurred near ')'. Expected ''''' in search condition ' "");/alert(/"XSS"document.cookie/.join());("" '. at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection) at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection) at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj) at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj) at System.Data.SqlClient.SqlDataReader.HasMoreRows() at System.Data.SqlClient.SqlDataReader.ReadInternal(Boolean setTimeout) at System.Data.SqlClient.SqlDataReader.Read() at Landmark.eBiz.Web.Product.searchlist.datareaderload_New(String Search_Proc, Int32 PageIndex, String SearchText, String Searchtype, Int32 recordcnt, Repeater rptItem) at Landmark.eBiz.Web.Product.searchlist.BindGrid_New(Int32 PageIndex, Int32 PageSize, String SearchText, Repeater rptItem, String Search_Proc)