How to solve the third challenge: Content page #1

The ID parameter on the URL of the content page - 1 is vulnerable to SQL injection and thus can be leveraged to completely dump the database.

Documentation: http://sechow.com/bricks/docs/content-page-1.html