Whitepaper that discusses error-based SQL injection in "Order By" clause in MSSQL. Continue reading...