[aa6667]

Hello everyone , I need your help , I’m trying to use sqlmap for sqli .

I scan the site and it tells me the following:

The searchphrase cookie appears to be vulnerable to SQL injection attacks. The payloads ' and '2401'='2401 and ' and '2767'='2772 were each submitted in the searchphrase cookie. These two requests resulted in different responses, indicating that the input is being incorporated into a SQL query in an unsafe way

I would like to tell you what parameters I can use to access the db with sqlmap


I will appreciate so much.


Regards ,

[Money-]

It says the " searchphrase cookie " is vulnerable , just put " --tables " or " --dump " to get the entire DB?

[aa6667]

I will try but it’s not working ! python3 sqlmap.py -url - -tables . Says it’s not vulnerable