Wildcard parameter issue

Hi everyone,   im facing an issue with wildcard parameter, i reviewed many blocked request match with attack sig " SQL-INJ "end-quote UNION" (Parameter)"   parameter names: ctl00_body_xxxxx   ...