However, it lacks the functionality to scan for SQL injection vulnerabilities. If the vulnerability can be identified, correcting the problem takes proper input validation, sanitization, prepared ...

This was a very bad sign, as it seemed the username was directly interpolated into the login SQL query. Sure enough, we had discovered SQL injection and were able to use sqlmap to confirm the ...