Domanda di colloquio di Deloitte

What will be the next step after finding an SQL Injection?