Background SQL injection

[reclu3a]

Background SQL injection

Parameter id is not filtered

The corresponding url is http://127.0.0.1/app/LKT/index.php?module=member&action=modify&id=1

Using sleep function to delay 5 seconds as an example

Using sleep function to delay 10 seconds as an example

Get the database through sqlmap