I need tips on messing with my company's system, what are some things someone could do through their site?

Micobertura.com

I have an inkling this might be directly connected to a database containing client data and employee information but no idea how to access it, there seems to be nothing preventing a brute force approach so someone could theoretically log into an admin's account relatively easy