#2 In the Expl0it Series:
Pharmacy Medical Store and Sale Point 1.0 - 'catid' SQL Injection
"This parameter "catId" is vulnerable to Time-Based blind SQL injection in this path "/medical/inventeries.php?catID=1" that leads to retrieve all databases."