Pregunta de entrevista de Deloitte

What will be the next step after finding an SQL Injection?