Mail.ru: uchi.ru check_lessons Blind SQL Injection

Blind SQL Injection in uchi.ru page due to insecure use sort variable of GET parameter...