sqlmap cannot detect a confirmed vulnerability
I have a verified injection which looks like:
/page/(SELECT+SLEEP(10))
But sqlmap cannot detect it no matter what.
This is how I’m running sqlmap:
sqlmap -u ‘http://MY-SITE/page/*’ –level=5 –risk=3 –threads=10 –dbms=mysql –method=POST…