RE: Possible vulnerability found. Need help for continuation 11-08-2016, 02:08 PM
#6
For SQLi I usually try the subtraction to confirm the vulnerabilities.
So in your case, try for example 2-1 or even 6-5, if it has the same behaviour than just 1 and let's stay 2-2 has the same behaviour as 0, then it's vulnerable.
Might not be exploitable though. But Sqlmap should be able to find the vulnerability and exploit it. You might have to supply the --string for it to differentiate the 2 cases.
So in your case, try for example 2-1 or even 6-5, if it has the same behaviour than just 1 and let's stay 2-2 has the same behaviour as 0, then it's vulnerable.
Might not be exploitable though. But Sqlmap should be able to find the vulnerability and exploit it. You might have to supply the --string for it to differentiate the 2 cases.

![[+]](https://sinister.li/images/modern/collapse_collapsed.png)