Crowdfund: UNION-based SQL injection: dumping the user table from a product filter

Pool funds with other buyers to unlock this exploit together — once the target is reached, every contributor gets full access.