Detecting SQL injection flaws with sqlmap