# SQL injection

- [Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data](/blog/port-swigger-labs/sql-injection/lab-sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data.md)
- [Lab: SQL injection vulnerability allowing login bypass](/blog/port-swigger-labs/sql-injection/lab-sql-injection-vulnerability-allowing-login-bypass.md)
- [Lab: SQL injection UNION attack, determining the number of columns returned by the query](/blog/port-swigger-labs/sql-injection/lab-sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query.md)
- [Lab: SQL injection UNION attack, finding a column containing text](/blog/port-swigger-labs/sql-injection/lab-sql-injection-union-attack-finding-a-column-containing-text.md)
- [Lab: SQL injection UNION attack, retrieving data from other tables](/blog/port-swigger-labs/sql-injection/lab-sql-injection-union-attack-retrieving-data-from-other-tables.md)
- [Lab: SQL injection UNION attack, retrieving multiple values in a single column](/blog/port-swigger-labs/sql-injection/lab-sql-injection-union-attack-retrieving-multiple-values-in-a-single-column.md)
- [Lab: SQL injection attack, querying the database type and version on Oracle](/blog/port-swigger-labs/sql-injection/lab-sql-injection-attack-querying-the-database-type-and-version-on-oracle.md)
- [Lab: SQL injection attack, querying the database type and version on MySQL and Microsoft](/blog/port-swigger-labs/sql-injection/lab-sql-injection-attack-querying-the-database-type-and-version-on-mysql-and-microsoft.md)
- [Lab: SQL injection attack, listing the database contents on non-Oracle databases](/blog/port-swigger-labs/sql-injection/lab-sql-injection-attack-listing-the-database-contents-on-non-oracle-databases.md)
