There is a form that I'm trying to crack it. It has two fields: username & password.
When I enter 1'; WAITFOR DELAY '00:00:15' --
in username, it tries to load for about 40 seconds, then it shows this error.
I get the same above error with other different inputs which tries to do SQL injection.
I think that form is vulnerable, Am I right ? How can I take advantage of it ?
The website is written in java as a backend language.