Exploitation of a SQL injection on a database