Mail.ru: SQL injection at fleet.city-mobil.ru

SQL injection in fleet.city-mobil.ru due to unsafe usage of POST parameter "param":"1'+MySQLpayload--+-"...