One SQL injection on a hit net (Http Referer sqlinjection)

Vulnerability Pig Man Vulnerability Details disclosure status:

2015-01-13: Details have been notified to vendors and are awaiting vendor processing
2015-01-14: Manufacturers have confirmed that details are only disclosed to manufacturers
2015-01-24: Details open to core white hat and related field experts
2015-02-03: Details to ordinary white hat public
2015-02-13: Details to practice white hat public
2015-02-27: Details open to the public

Code Area

GET/?cityid=&cityname=%e5%b9%bf%e5%b7%9e http/1.1host:m.maizuo.comproxy- connection:keep-aliveaccept:text/html,application/xhtml+xml,application/xml;q=0.9, IMAGE/WEBP , */*http://m.maizuo.com/city' accept-encoding:gzip, deflate, Sdchaccept-language: Zh-cn,zh;q=0.8,en;q=0.6,zh-tw;q=0.4cookie:

One SQL injection on a hit net (Http Referer sqlinjection)