Pergunta de entrevista da empresa Deloitte

What will be the next step after finding an SQL Injection?