Use Google Search Console to request removal of any already-indexed sensitive search-results.php pages.
inurl:search-results.php "No results found"
inurl:search-results.php "displaying 1 to 5"
inurl:search-results.php intitle:"search results"
Search: inurl:search-results.php "search 5" site:.edu Inurl Search-results.php Search 5
Result URL: https://library.univ.edu/search-results.php?q=5&db=catalog Use Google Search Console to request removal of
Observation: The parameter q=5 retrieves items with ID 5. By fuzzing q=5' (including a single quote), the page returns a MySQL error, exposing the database version. inurl:search-results